7, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:47 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x1d00) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 950.617657][T29802] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 950.664027][T29806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000910008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:47 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x1e00) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 950.793752][T29827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:19:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x1000004, 0x2a010, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="06000080b8dd84cbdfbde09e110bc34a8a749250aab1f6a12149f8e7c9933606fa062fd6794e1a6d0463856613a2f0dc1c57a4fb3f8cba2e5154cfe014ab0826bd66befc47dd53a75b78b08eccd2ede3e7bdb3c99dfc05dd2853f0b15f7157ecb37ee7033a08a2ff242bd28300b783f486b1b549f219090993309d090000ef8a24b94f16e6eeb563e7746ed1d6e3eedc75d4ef9b5b0a33e0f53529b0f2d83fea83dcfd0acc682c6abc451039d1e030c112db3aebd928152b31e8b971a6087bf3ecf67068cb4475f60abc29ede73ce9", @ANYRES16=r6, @ANYBLOB="01000000000000000000130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00000000000600110000000000"], 0x4c}}, 0x0) r7 = openat(r4, &(0x7f0000000180)='./file0\x00', 0x630001, 0x0) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x100, r6, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20004014}, 0x2400c810) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 951.010407][T29875] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:19:47 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x1f00) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:19:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 951.101845][ T4922] tipc: Node number set to 2130706433 14:19:47 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000001010000006c"], 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x46}}, 0x20}}, 0x0) 14:19:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000a10008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x9}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 951.279776][T29901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:47 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x2000) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 951.389415][T29905] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 951.394783][T29912] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:19:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000c10008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:19:48 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x2100) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x40000000}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000040a000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000001c0)=0x7f80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x9], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000140)) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x40a600, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x80000, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x8000000400010866) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:19:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 14:19:48 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x2200) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 952.009868][T29934] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 952.078498][T29939] __nla_validate_parse: 3 callbacks suppressed [ 952.078523][T29939] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 952.078652][T29947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 952.107202][T29954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xe}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:19:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000a10008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:48 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x2300) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000e10008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:19:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) sendfile(r0, r1, &(0x7f0000000080)=0x4, 0x2) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:19:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xf}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 952.294389][T29979] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:19:49 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x2400) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000f10008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 952.702865][T29996] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 952.747002][T30002] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 952.803915][T30003] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 14:19:49 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000240)=0x3f) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000480)=""/250, 0x1b3, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)="52466c0a4ed76fbaae3fd172f87d62724eddefe5587f4392", 0x18}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="ba8ad28621843cd1461abae1db044a24ae6e1702aba31b7690b437536dcd6a6803438a515edc8e249d6bb0e188d0ad6abcf084fac2580a173e408858dfced0c988565ff31c842f5c6d465006647fa7a30c65d2287cb80dbcf82714a78184aea5eea3d396644d3d36af8251883b5e3dfef481b2058b023cd36bd4e4004237c5faddda728736ba6f38ad", 0x89}, {&(0x7f0000000580)="ce7c610fa0bbce77b010fec4ddb88b4fc47d34089650db11cffd096848c8fcdb2202141109d0be205812c59ef601e9583a5ecfae2c558b285027eacfbbb8fedd0d77fac695f4b906c57311b1bf845597af42fce37d53902531cb0ba1567cab630f0e4aff4c914b2ad9c3f7465812f8e0e92812b93116bdb14eb27cb4f66bb54191096b6eb19a86497bdb646194d9adeb841e1ae4cc4ca0456ae9b59a01c978d2cd1d01f23264e4d87c8367e788c6ae0542881e0d26676bcb4fc93a50f9656eed4882", 0xc2}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="5912bb079be089cfeea7490bd90b27b56d4314990e5860be4d3139be9215acf414b6eba13ed815ffe3a02368876840457a87217d9ab1982a6557af116bc7b9e27bd8b6f9b24f44499b1ab700cd", 0x4d}, {&(0x7f0000001700)}, {&(0x7f0000001740)="bfd4fa95f4ff9fc2e5f5ab96f37a90707dafca069625ffd7958313718210d2fd147536069ccfbf94bf83f2b58cb3ef333ef98044b28b07cc78c073550247aab7d4133fd541ab4543be43b405e644be58e9537393710d07f266f656e0cbe9", 0x5e}], 0x8, 0x0) syz_io_uring_setup(0x4a51, &(0x7f0000000340)={0x0, 0x7e39, 0x20, 0x1, 0xc4, 0x0, r0}, &(0x7f0000b0b000/0x2000)=nil, &(0x7f00006e3000/0x6000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000003c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x118, &(0x7f0000000400)=0x1, 0x0, 0x4) set_thread_area(&(0x7f00000001c0)={0x1, 0x0, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x5, 0xda, 0x81, 0x0, 0xf3, 0x4205a, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x0, 0xffffff80, 0x2, 0xac, 0x1, 0xff}, r5, 0xa, r0, 0x8) [ 952.895120][T30003] team0: Cannot enslave team device to itself 14:19:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00001010008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 952.967412][T30015] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 952.979820][T30002] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 953.001036][T30023] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) dup(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x0, @private, 0x0, 0x0, 'wrr\x00'}}, 0x44) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000380)) pipe(0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000001c0)={'virt_wifi0\x00'}) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20088090) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)) 14:19:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x60}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:19:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x76, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r6, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x2, 0x800, 0xc3, 0x22, 0x976, 0xfa}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r6, 0x3}, 0x8) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:19:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:19:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00004810008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:49 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xf0}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 953.388968][T30056] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:50 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_setup(0x30c9, &(0x7f0000000080)={0x0, 0xbeeb, 0x0, 0x2, 0x1b1}, &(0x7f0000822000/0x4000)=nil, &(0x7f00008f8000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0xffffff1f, 0x79360200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1203}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xbc, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x68}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x77}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x20}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x2}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xeb}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x4}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffd, 0x79}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x1ff}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x84) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000080)={0xc25, 0x2}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:19:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00004c10008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 953.552208][T30063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 953.562009][T30071] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:19:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x300}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 953.698335][T30086] validate_nla: 2 callbacks suppressed [ 953.698352][T30086] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 954.115735][T30066] IPVS: ftp: loaded support on port[0] = 21 [ 954.127682][T30047] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 954.297543][T30133] IPVS: ftp: loaded support on port[0] = 21 [ 954.355929][T30132] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 14:19:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x76, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r6, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x2, 0x800, 0xc3, 0x22, 0x976, 0xfa}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r6, 0x3}, 0x8) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:19:51 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f0000000140)={0x0, 0xb949, 0x11, 0x3, 0x8, 0x0, r0}, &(0x7f00009c7000/0x1000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x80000001}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e21, @remote}}, 0x3, 0x40}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) epoll_pwait(r7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x81, &(0x7f0000000000)={[0x1f]}, 0x8) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x8, 0xff5, 0x40, 0x400, 0x10001}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r4, 0x2, 0x8000, 0x1f}, &(0x7f0000000180)=0x10) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0xffffff1f, 0x79360200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1203}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) mmap(&(0x7f000057b000/0x4000)=nil, 0x4000, 0x3000001, 0x28011, r6, 0x2000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:19:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:19:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00006010008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x500}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 954.483066][T30161] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:19:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00006810008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:51 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x2, 0xc5}]}, 0xc, 0x1) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:19:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x5a1}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:19:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb2, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000000)) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'U+', 0xff}, 0x16, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000200)=0xc) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000140)={0x30, 0x78, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, {}, {0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 955.007845][T30198] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:19:51 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6, @empty, 0x800}, @in6={0xa, 0x4e21, 0x754, @private2={0xfc, 0x2, [], 0x1}, 0x7}, @in6={0xa, 0x4e21, 0x401, @empty, 0x8}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @loopback}], 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000728000/0x2000)=nil, 0x2000, 0x300000a, 0x50, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x11c, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0xffff, 0xc5, 0x7], 0x3, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000340)={0x8, {{0xa, 0x4e23, 0x7, @empty, 0x2}}, {{0xa, 0x4e23, 0x5, @mcast2, 0x10000}}}, 0x108) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) r5 = socket$can_bcm(0x1d, 0x2, 0x2) fsetxattr$security_evm(r5, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "d82113b01da4a197df62b10ef3af0b541b4b5b1a"}, 0x15, 0x2) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x20010, 0xffffffffffffffff, 0xffffc000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:19:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00006c10008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x600}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:19:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 955.277946][T30222] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 955.410048][T12471] usb 5-1: new high-speed USB device number 14 using dummy_hcd 14:19:52 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) socket(0x1000000010, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=@newtfilter={0x47c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44c, 0x2, [@TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3800000}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}]}]}}]}, 0x47c}}, 0x0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:19:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00007410008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:19:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x700}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 955.625519][T30251] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:19:52 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x2, 0x0, 0x9, 0x8, 0x100, 0x59f2c462, 0x7}, &(0x7f0000000080)=0x20) [ 955.780387][T12471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 14:19:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00007a10008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 955.825466][T12471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.901102][T12471] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 955.945939][T30280] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 955.958100][T12471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.014000][T12471] usb 5-1: config 0 descriptor?? [ 956.515130][T12471] wacom 0003:056A:00B2.0001: unknown main item tag 0x0 [ 956.535759][T12471] wacom 0003:056A:00B2.0001: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 956.599856][T12471] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B2.0001/input/input10 [ 956.666762][T12471] wacom 0003:056A:00B2.0001: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.4-1/input0 [ 956.808254][T10705] usb 5-1: USB disconnect, device number 14 [ 957.599843][T10705] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 958.030023][T10705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.045876][T10705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.059954][T10705] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 958.076049][T10705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.086587][T10705] usb 5-1: config 0 descriptor?? 14:19:54 executing program 4: syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f00000000c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000d59300bfe6000200"}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r2, 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0x142a}, {0xffffffffffffffff, 0x8148}], 0x2, 0x9) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) dup3(r1, r0, 0x0) 14:19:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:19:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x900}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:19:54 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5d40, &(0x7f0000000080)={0x0, 0x7b52, 0x20, 0x0, 0x384}, &(0x7f0000858000/0x1000)=nil, &(0x7f0000756000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x6c4f, &(0x7f0000000340)={0x0, 0x6a61, 0x10, 0x0, 0xb3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000648000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r0, 0x0, &(0x7f00000001c0)="9066c5b43c0c58b15c143886176d4d196edecd544f346b6d1ec2f1f8b6c06d3a7a0d4b2885298be1cb0d55545134410bda5811148c46d93a8fb7fa5f4a3b3dfc86819a7fe92c0fc54967109422df4bce9af963f8d37be356a16d22a2a69e094e2d4a5b3aa10bc9f5df6a73d4eac26cc5ef8af9ec570fc06204255c9d6aeee872e018dadfb0c92103b0b400f4d29bf65f2bdac912b9ee7bcba33f24abf2cee6452a70033802d962e6ad54f56f69d46347db7a8bd7ce3de7be1063c5379e1ea8a0841b8dba62735914ac9793a5718c8d34b7ba49c7381e807e7303d41acdbb6f175a656d8e01e91ac8d831f18addfb84", 0xef, 0xe005, 0x1, {0x0, r3}}, 0xfffffffd) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000011008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:54 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0xbb62, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$audion(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) accept$unix(r7, &(0x7f0000000400), 0x0) [ 958.300027][T30331] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 958.319706][T10705] usbhid 5-1:0.0: can't add hid device: -71 [ 958.326343][T10705] usbhid: probe of 5-1:0.0 failed with error -71 [ 958.367064][T30332] __nla_validate_parse: 20 callbacks suppressed [ 958.367084][T30332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 958.385686][T10705] usb 5-1: USB disconnect, device number 15 [ 958.512921][T30337] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 958.578343][T30331] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:19:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x545a01, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x2, 0x800, 0xc3, 0x22, 0x976, 0xfa}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x9f, "1933169afafee8af8426a5f3e3429cf8c26aee2301d5fc214ffa6475906cbefbb0f0352313e3c69bad5ad69c99735e745b2803accb8df3766f0b304224d591b6ca3af9805ade8f18413916a6d045ebed3771f01f134a63578e9886089868084310a07872dbcd2a7f7960ac4133a7183bbf8021139575bed99ea7b625bc512a449d97f08a7d5417eeb864992ee8949301316b93c3a3d0286f7af0cb27d22568"}, &(0x7f0000000240)=0xa7) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = dup2(r4, r0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000028bd7000010000000d0000000800320001000080080034004287eb499aa5f44e8638d33398f90e0000050038000000000008002b000000008086"], 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:19:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:19:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xe00}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:19:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000012008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 958.887941][T30427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 959.007717][T30446] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 959.032954][T30449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 959.044495][T30427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x4, 0x10202) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000140)={0x2, &(0x7f00000000c0)="f269"}) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) ioctl$SNDCTL_DSP_GETCAPS(r5, 0x8004500f, &(0x7f0000000180)) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 959.046339][T30461] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 959.213740][T30446] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:19:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xf00}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:19:57 executing program 4: syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f00000000c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000d59300bfe6000200"}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r2, 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0x142a}, {0xffffffffffffffff, 0x8148}], 0x2, 0x9) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) dup3(r1, r0, 0x0) 14:19:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:19:57 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4dec4519) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x79) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001240)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001440)={r3, 0x10001}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000240)={{r3, 0x100, 0x9, 0x100, 0x9, 0x9, 0x0, 0xce0, 0x0, 0x8, 0x7f, 0x567, 0x3, 0x101, 0x7ff}}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x8, 0x1, 0x5, 0x3ff, 0x6, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x202054, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x3f00}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:19:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000140)={{0x3, 0x2, 0xed2, 0x1, 0xffff}, 0x100, 0x6}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x10c, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r6, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000400f72c68b6da67b184580dfd66e1f4f01a41af95238541aaaaaaaaaabbaaaaaaaaaabb0180c2000000"]) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:19:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000014008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 961.338867][T30681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 961.395926][T30684] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:19:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000011e008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:19:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x6000}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:19:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x8}, 0xc) fsync(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:19:58 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x2c) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000340)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x154, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380)='freezer.state\x00', 0x2, 0x0) getrusage(0x0, &(0x7f0000000140)) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) socket$kcm(0x29, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0x2c) fstat(0xffffffffffffffff, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 961.983104][T30797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000020008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 962.112065][T30809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 962.316642][T30852] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:19:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000020008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:19:59 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$snapshot(r5, &(0x7f00000000c0)="3d441d357b2a", 0x6) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:19:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xa105}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:19:59 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000000000)={0x2, 0x3, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:19:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:19:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000025008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 963.107066][T30895] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:19:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xf000}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 963.197269][T30903] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 963.217252][T30903] team0: Cannot enslave team device to itself [ 963.227597][T30897] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 963.274245][T30904] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 963.309312][T30905] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000012008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000002f008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:00 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0xffffff1f, 0x79360200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1203}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf37, 0x63}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0x20048801) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000000c0)='/dev/null\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r5, &(0x7f0000000140)="7f0604648c4b7f26234c4c134884732ed6c62ec12de014e586313ca12e6ce08e42a1fd3de73545518a2ead942bac09834cad4d3e02ba63ac8066928a6adcd5a09eaf990e1388d63b1d568fc85d5da68296eb3bfe62fc061efc444ef60b55d475edfc3f090b99768ef8fe51dd31706a78e495c95d425a500db7218e548fa0607b6255f918ecbf3e31cbc3233a4037c24869abf42e8637d220d12a327d0964", &(0x7f0000000340)=""/133}, 0x20) 14:20:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xffff}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 963.544890][T30925] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) r5 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x341) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044004}, 0x5) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 963.697687][T30944] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 963.712278][T30944] team0: Cannot enslave team device to itself [ 963.728085][T30945] __nla_validate_parse: 2 callbacks suppressed [ 963.728107][T30945] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000044008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:00 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r4, &(0x7f0000000080)=""/13, 0xd) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 963.948773][T30944] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 14:20:00 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2c4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x4c) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) write$sequencer(r4, &(0x7f0000000080)=[@raw={0xfe, 0x5, "6deb95a941c2"}, @generic={0x18a}, @l={0x92, 0x8, 0xd0, 0x1d, 0x5, 0xb9, 0xfffb}], 0x11) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000047008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x2, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:00 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xab48}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x2c}}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000005c0)={0x4, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r1) dup2(r0, r2) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x6) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000280)="2e954e50a6a3fe64e8284288f00000000400000000000000000000ba3f1e26a36ea237983b3e2e5d65208ff623ec83b399320361439e58cbc2c4ecc0446962790576204d18b2222fa5d9578719ae328d6588f8faa7b382da33b52947e4f59212a8b851295947236b97314b226e135cd8e62bd7129f0f4c36dd0b1691aa2416e06b051ed21ca25af58172b69902000000bfc8cd33f3870df853a950b5eab215659ad9b2efb0295987550564fa76d704396035925717f635d16a7292a5", 0xbc, 0xfffffffffffffffd) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) read$qrtrtun(0xffffffffffffffff, &(0x7f0000000100)=""/112, 0x70) [ 964.228779][T30981] validate_nla: 1 callbacks suppressed [ 964.228800][T30981] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:00 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x2, 0x7, 0x3, 0x5, 0x8, 0x7, 0x1ff, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0x6, 0x81, 0x8, 0x3, 0x2}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r4, 0x1f}, &(0x7f00000000c0)=0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 964.282533][T30983] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. [ 964.301126][T30988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000005b008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 964.477052][T31017] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. 14:20:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000080)={0x1, 0x100, 0x0, 0x2, 0x6, 0x6}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:01 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000340)) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000240)={0x9, 0x5}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x4dac, 0x8, 0x3f, 0x7f, 0xf084, 0x1, 0xfffffff8, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x4, 0x10001, 0x2, 0x7, 0x7}}, &(0x7f00000000c0)=0xb0) read(r2, &(0x7f0000000180)=""/38, 0x26) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x3f, 0x6, 0x100}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={r4, 0x80, "6e79489bf22255e1fdd27e3b04e175a624d549aeb906d741df92259e09d1b611aac7001e6e6c4517a70f41fa01954c4289be86bfe4063d43b6b8869af1fa9eb40f498f4c3a2c614044fab0bebdf03c0fbe03dd04a48242e3815482981bfa2e47e3ac6aee34393abf73a076156de3889186684469eb8cd3bfb5038f6d3ed40704"}, &(0x7f0000000380)=0x88) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x2d, "0177e52fee3df3e72564032fed7e6f6a68af0ed5cc552d0f214997984bb3d1d086f8b6cc42483e7fdcf55e79bf47383a12"}, &(0x7f0000000440)=0x55) 14:20:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x3, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 964.653952][T31023] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 964.766634][T31043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 964.818753][T31045] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. 14:20:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000073008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:01 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000000)=0x1000) 14:20:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$CHAR_RAW_ZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x20, 0x8}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r2, 0x0, 0x0) keyctl$get_persistent(0x16, r1, r2) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newpolicy={0x0, 0x13, 0x4, 0x70bd2a, 0x25dfdbfe, {{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x3, 0x4e20, 0x5, 0xa, 0x80, 0x20, 0xff, r4, r1}, {0x6, 0x5c1, 0x5, 0x2b6, 0x10000, 0x703, 0x2}, {0x0, 0x9, 0x1, 0x21f1}, 0x81, 0x6e6bb8, 0x2, 0xeeec87e289cacc7d, 0x3, 0x3}, [@replay_val={0x0, 0xa, {0x70bd25, 0x70bd29, 0x82}}, @replay_val={0x0, 0xa, {0x70bd27, 0x70bd29, 0x5}}, @proto={0x0, 0x19, 0xff}, @tmpl={0x0, 0x5, [{{@in=@remote, 0x4d3, 0x3c}, 0x2, @in6=@local, 0x3506, 0x3, 0x1, 0x3f, 0x1, 0x8, 0x46d}, {{@in=@multicast1, 0x4d6, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x3c}, 0x3504, 0x1, 0x2, 0x6, 0x40, 0x3, 0xffffffff}, {{@in=@multicast2, 0x4d6, 0x2b}, 0x2, @in6=@local, 0x3507, 0x3, 0x3, 0x20, 0x10001, 0x8, 0x2}, {{@in6=@remote, 0x4d3, 0x32}, 0xa, @in=@loopback, 0x3500, 0x4, 0x1, 0x80, 0xfff, 0x1937, 0x7}]}]}, 0x38}, 0x8, 0x0, 0x0, 0x8000}, 0x0) [ 964.954628][T31058] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 964.984629][T31062] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. 14:20:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x7, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000002008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:01 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x100, 0x840a, 0xfffff195, 0xabd}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000040)=""/128) syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[], 0x0) 14:20:01 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 965.280711][T31082] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 965.291472][T31083] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x51fb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4000029e}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000513000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 965.360432][T31088] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 965.386366][T31087] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 965.386492][T31086] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 965.441148][T31083] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x3b, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000003008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 965.618055][T31114] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 14:20:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:02 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_uring_enter(r0, 0x450c, 0x52f, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x8000, 0x4, 0x6, 0x0, 0x118, {0x0, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, [], 0x1}, 0x2}}, 0x8001, 0xfffffffd, 0x5, 0x3, 0x2}}, &(0x7f0000000000)=0xb0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 965.686358][T31116] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 965.714718][T31118] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 965.719726][ T4922] usb 5-1: new high-speed USB device number 16 using dummy_hcd 14:20:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x54, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:02 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000004008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 965.939045][T31138] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 965.947679][ T4922] usb 5-1: device descriptor read/64, error 18 14:20:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 966.219719][ T4922] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 966.420051][ T4922] usb 5-1: device descriptor read/64, error 18 [ 966.540546][ T4922] usb usb5-port1: attempt power cycle [ 967.249702][ T4922] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 967.420764][ T4922] usb 5-1: device descriptor read/8, error -61 [ 967.689683][ T4922] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 967.859905][ T4922] usb 5-1: device descriptor read/8, error -61 [ 967.980590][ T4922] usb usb5-port1: unable to enumerate USB device 14:20:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000003008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x69, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:04 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$l2tp(r5, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000140)={0x0, 0x8, 0x3, &(0x7f0000000080)=0xfffffffffffffe02}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000240)='security.evm\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="85b56dcea14ae0d8c5fd022ad60fca63e403da022bac0f0db1d504715c82303a6097ccef6e6bccf418f2c8d54ce2e0a6776ad3ed77e48da0eaa7964ba382a729ca06fd947d03d4cb4423b9be7f7abccd6b69e51b0b078b81ead77620814adba40d55e217ca269c71d882649b3ea71953e1efd6e69bb30e981b6282c6493a5752be8ab589ffeb1da1e585eb3a2445d632a0f0a96f0afe8ea4a3853e79d29046eae607f4c2f01e60640b1515d68473e963b284856038b3b07012f8b247d392418f2050421a23397915df07a6267d0334fea7a1ed521d529f49954a294fa6a3d64a9b75cd7bf6e740"], 0x2, 0x3) 14:20:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000005008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f00000000c0)) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 14:20:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000006008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:05 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000140)={0x3c00, 0x600, 0x80, 0x600, 0x4, 0x917, 0x2, 0x2, {0x80000001, 0x4}, {0x1, 0x8, 0x1}, {0x7, 0x5, 0x1}, {0x1, 0xe05}, 0x0, 0x1, 0x200, 0x4, 0x0, 0x7fff, 0x7ff, 0x2, 0x0, 0x3, 0x3, 0x7, 0x0, 0x1, 0x0, 0x8}) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x2, 0x800, 0xc3, 0x22, 0x976, 0xfa}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="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"], 0x18) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x2, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 968.592078][T31195] team0: Cannot enslave team device to itself 14:20:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x80) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname(r5, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="000000f7ff000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x4004010) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r6, @ANYRES32=r6, @ANYRES32=r7], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x340, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0xc567}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f00000005c0)={0x2, 0x8008, 0x0, 0xcf, r10}, 0x10) r11 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 14:20:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={0x0, 0x1000, 0x50}, &(0x7f00000013c0)=ANY=[@ANYBLOB="656e633d72617720686173683d626c6b6532732d313630000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000005005bb1b7ba057b7532f0c1380000000088f6bdaf7a1ed563017f2105b36f790c75289d63bc9d0c87e80b048e8634b38f77d3cd65748d141ae78b0cdad97e677748d360e175d874399af8e6670f3185a0a96640f11f9dbbc593e7a852484c8ede5385dc82c40aa9e38424c79403df6c844256d7"], &(0x7f0000000340)="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", &(0x7f0000001340)=""/80) [ 968.843363][T31208] __nla_validate_parse: 13 callbacks suppressed [ 968.843383][T31208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:05 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc8002, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000007008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 969.005353][T31213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:20:05 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x181100, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x6b8, 0x1f, 0x9, 0x4}, {0x400, 0xbe, 0x7}]}, 0x10) [ 969.110137][T31213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:20:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400280, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0xfffffffd) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r3, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x4, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 969.159279][T31223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:20:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000008008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$MEDIA_REQUEST_IOC_QUEUE(r3, 0x7c80, 0x0) dup3(r0, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, 0x0) [ 969.369547][T31265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:06 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10040, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x1e4, 0x0, 0x304, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4797}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9e, 0x3, "e4cf0559c3ce0e0f9ef12cea9ddbdbaf36e56b00777f45277cc5ba8ac37e66ada1d135a0cc2e7c9d0a65f94f6adc554c74f8b0fd648b1d5efb41939cc03367b5333c53a0658c901d393c6b878c52ad2c2e7600b56f691849cf08574434338d206c7c555cd642348eb4fb86a98cedf0ccab8eac9d76621761a7466217302f6ce9809205a4e9501dbb9bbed6c93b551e178e68d76ed976f2bef520"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "3e771dea0f5604eb9617f6a70ca7213b83e3de5a53"}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x64}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 969.442884][T31271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 969.475529][T31265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x810, 0xffffffffffffffff, 0x52004000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x5, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 969.554370][T31276] validate_nla: 6 callbacks suppressed [ 969.554401][T31276] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:06 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x39c6, &(0x7f00000002c0)={0x0, 0x91cf, 0x10, 0x0, 0x3d6, 0x0, r0}, &(0x7f0000635000/0x4000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r0, 0xffffffffffffffff, 0x80000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000)=0x39bc, 0x4) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "cfd1e49b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="d59d8384f8cbfa4d271ded1e80475dcc9207b03ce6e7d87b1c6d540749758cabad9636439be1583b3ed38ce82f8f1c84226227d1190ddaa67b5584a8cebfc98c8bc6917fbcd82d2060eb8ae6d6b78220822d3819c54ae4e7dd9ba7a04eb653d1d9a91202", @ANYRES16=r5, @ANYBLOB="00042bbd7000fedbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048081}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x160, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4042) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000780)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:20:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000009008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 969.884327][T31300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x4) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x10, 0x0, 0x4000000, 0x3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000340)=[{0x1, 0x2, {0x2, 0xf0, 0x3}, {0x0, 0x1, 0x4}, 0xfe, 0x1}, {0x1, 0x1, {0x1, 0x43ffba9dc144760a, 0x4}, {0x2, 0x0, 0x2}, 0x0, 0xff}, {0x2, 0x1, {0x1, 0xff}, {0x0, 0x1}, 0xff, 0x2}, {0x3, 0x3, {0x0, 0x1, 0x1}, {0x1, 0xf}, 0xff, 0x80}], 0x80) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6}, 0x8) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x80) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:06 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r3, 0x0, 0x0) connect(r3, &(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x80) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 970.040972][T31316] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 970.041076][T31306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 970.059134][T31314] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x7, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000a008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b70000", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x40002, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) 14:20:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x69}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008800}, 0x80) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)=""/126, 0x7e}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x8, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 970.422626][T31349] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:07 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000184000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x6004, @fd_index=0xa, 0x7, &(0x7f0000000240)=[{&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000000140)=""/214, 0xd6}], 0x2, 0x0, 0x1, {0x0, r4}}, 0x4) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x87, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2ae}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r6, 0x8000000) syz_io_uring_complete(r7) syz_io_uring_submit(r7, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f00003b9000/0x800000)=nil, 0x800000, 0xe, 0x0, {0x0, r4}}, 0x736) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 970.610410][T31362] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 14:20:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000b008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b70000", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 970.692286][T31373] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 14:20:07 executing program 4: socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x7, 0x9}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000080)={0x9, 0x1, {0x3, 0xe30baab509f924c0, 0x10000, 0x1, 0x101}, 0x8}) keyctl$set_reqkey_keyring(0xe, 0x2) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000040)) 14:20:07 executing program 3: ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 970.780834][T31379] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) ptrace$setopts(0xffffffffffffffff, r6, 0x6, 0x30) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, r5, 0x0, 0x0, 0x100}, 0x400, 0x0, 0x10000, 0x3728244e, 0xffffffffffffffff, r6}) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x9, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000c008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b70000", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x5}, &(0x7f0000000380)=0x8) r6 = syz_open_dev$sndctrl(&(0x7f00000003c0)='/dev/snd/controlC#\x00', 0x5, 0x400000) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000002980)={0x8d3, 0x2cb7b0c1, [[], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], []]}) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x4, 0x40, 0x9, 0x3a, 0x0, 0x8, 0x30e02, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb0d6, 0x1, @perf_config_ext={0x0, 0x1f}, 0x86000, 0x8, 0x8, 0x5, 0x33d, 0x6, 0x2}, r5, 0xa, 0xffffffffffffffff, 0xa) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@ipmr_newroute={0x1c, 0x18, 0x200, 0x70bd2a, 0x25dfdbfc, {0x80, 0x10, 0x80, 0x7f, 0x0, 0x0, 0xfd, 0xa, 0x300}}, 0x1c}}, 0x8010) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000400)={0x80000001, 0x3f, 0x200, 0x100, [], [], [], 0x400, 0x100, 0x2, 0x1, "d5eb80aed25ba195fe2e44274c43cafe"}) sendmmsg(r3, &(0x7f0000001580)=[{{&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x1, 0x40, 0x2, "386bc80d4a516e6865e642d38e71e9d84afe731e5d86776c7044f6d0aba7b0791425449efe132221a1419c7ff795038269da428d0aa5a7d1e3defcc7286d0a", 0x24}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="6aa8a807b49083a8e7e15f82d0404e85ff26864510bb859ba8f07e49358604968ba2db792600c7be6e314a95cec3d33c092ebc8d190559b270baf6af3fa3add7b495a452c9aa2ad6ab740225c61049e9d01ec838d822a518cc19cbabc0ebba3f9741eba6e3c7f62a7a4144c8356078d9f52610454e0fc5ea15e841fa5f2001600f07937ffb4703ce1fd1a68923221967229e5eb0739e101900c1c24741996fb3f3d7104480bdeaa1a1", 0xa9}], 0x1, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x12f0}}], 0x1, 0x20000011) [ 971.104351][T31404] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:07 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x20}, &(0x7f0000554000/0x3000)=nil, &(0x7f00004c6000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b700000000000000", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xa, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000d008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:08 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) tkill(0xffffffffffffffff, 0x3c) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000c008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 971.434996][T31427] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b700000000000000", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 971.561806][T31437] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 971.611723][T31437] team0: Cannot enslave team device to itself 14:20:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x202, 0x0) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:08 executing program 4: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private0={0xfc, 0x0, [], 0x1}, 0x23}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x6000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r3, 0x917, 0x0, 0x1, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x3c}}, 0x0) 14:20:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000e008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:08 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4993, &(0x7f00000002c0)={0x0, 0x2, 0x11}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b700000000000000", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 972.039575][T31464] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0xffffff1f, 0x79360200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1203}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), 0x10) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000001b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b00)={&(0x7f00000009c0)={0x1138, 0xd, 0x1, 0x201, 0x70bd27, 0x25dfdbfc, {0xc, 0x0, 0x5}, [@nested={0x1120, 0x7e, 0x0, 0x1, [@typed={0xc, 0x61, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@remote}, @typed={0xfb, 0x8b, 0x0, 0x0, @binary="c7a99717f2e4fc083264744d42fe17af652ed866e17204296613c3f6a4873960e4f51fe63aa7d03ba5012277db16fc1697e04cdd0a794c7d0fa791ecb5469959665ea659ec90b40e837a3f652550958a565c1426bd07eadd302c4cef7d319a86b5153f532ece2954e7f85135605adb3c81baebff15d0741da4f35dc162036fe822788119b957ad275668bdc103f74edf9dbf03d274154e8f39c3856ccddf94e090b0c3c9517f351fde3e0995f80c4b6d1ad1a8014c809c40ca5e6620a5b9992ccab57fdba01f2b63ff3bc0c78e90e47c33cb2572a66df013c403484ca26c750671a305c3aff395acbd69402b1ccd5d932c90b0fef974b0"}, @generic="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", @typed={0xc, 0x6b, 0x0, 0x0, @u64=0x1}]}, @typed={0x4, 0x2b}]}, 0x1138}, 0x1, 0x0, 0x0, 0x24000000}, 0x44000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) sendmsg$alg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="eb3c307e369967a6b060eccb5a29b66e7bcdefd649da38f5e3a9e1ec8b9b3ecc7f24c129d7b166ce87d674d28c60c8df22c644e5097b052e2f1c601a228982ded6782942e0e56af78c9e9260c25e775db309b7c36384936a63529c45a434656b7f0420b003f5f511d251692819021a9138b55356b6db10c27086fe19f34d65e3557700ba5001d2af6e2519f677952d8d46", 0x91}, {&(0x7f0000000080)="ef3f6f7193478159f604a423ddfeb72c31e09e49e899dcf0c5a3c6e33faaa851f14e4d7365de729239b99257daf4", 0x2e}, {&(0x7f0000000340)="db5764fee0d5785c0dfe35519e088c511e08b1a2150923badfdd8e924ae004c88636bdf963e8b2dd6755a6d53e0df395f1cbb64836224400055bcad194ee90f6dd4fd8a2cf15c887f3f34c5ce12deef1ad00e1c2a1884b4a105c7fedae5cc01821b050314c90cb6be0c4039e8ece7a60e7641ee0095dd75e24cc1e837e9dee608a81", 0x82}, {&(0x7f0000000400)="e6add4ba556167d50aff4dc7d75d0e99c41bb817b8120a4f534399f510bd7ad9274a526ff3d94db62b5dc198699b2a84cfcc3108b38133fe0d196cfae30b31d0d78cee3fba6e1a01cf8e4a50a59c4896a520d8f23ed70664e6cfaafd28e5e12d6717043425216545054ab904fb19c950920a158cccd0d8ead72734f1293545e3f72aa860cce2e792193793b7", 0x8c}, {&(0x7f00000000c0)="94b96c01516010ef50ca14fb887c4c", 0xf}, {&(0x7f00000004c0)="85e963980fd6246c5183576478208e52d5de0eabebb2b363170ec17ed8818d41692741ecd6fefabbcc7a334fb87d9d0e7d7163138b326109af4921526815558d81553427cb35a8660f185330b3f6fcc51ccd8c3d0933b2665bfc26e53623ed9982ca3110bb113564ffa0c321a9f6ce668e59964b419d98544199b46e87bdfa651e456e8533dff9269d1dd2eaf3675cc6b3e5913b73fe0edf030e2767f0719f56", 0xa0}, {&(0x7f0000000580)="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", 0xfa}, {&(0x7f0000000240)="3293aa95da01cc893fea734647facf76b47ff9186b54e56645a1165e7fa00e3fbfb36bd28566f1", 0x27}, {&(0x7f00000006c0)="4b1356cbfff6ae7f36625b413501c13f64fae2665fc8c67b3f43ec5a51e3b7a1a949405239ffaab4bfb052039344ad89e64fe46b92d1eb2a327b5f23297697bade02af15034963243f06e50ad30829b87c50db3efa8d0bcaaeafecbb13d80ba12d3b6a9ca40694a44575c9d56e8238468e917ac7ae1ec7", 0x77}], 0x9, &(0x7f0000000840)=[@iv={0xf8, 0x117, 0x2, 0xe4, "7d8ff6b70aa7e252bf17bceb8089b6f44fe9e34a9ec6a21ea462abf94199de81683085fac631b869b48db12f0ee6c6ac58b4bdcba05ebbaeaf59db74fcfadc0ccb3f8e2ca819628888085295d916092c7ad0674102ab86b7c89ae4566c231c484bd292ef8118180613f4bfd1b4c88c68278565d0a96934945140e590b429a1b8e50708c3bf544d079d9856ffad701ebb33dd45e6d3d051301d3c1d056a415568d21e932a58613e2c13ae57b6b241fa3a54f2df089abbdfa8952ca49c95f8cae7aad91fb2fa7776568ce75c48c262a367d9e94d03103d8a0b6bc8b37532e7a3321d5c6720"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x140, 0x1}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x10, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000f008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:09 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r4, &(0x7f0000002700)=[{0x0, 0x0, 0x0}], 0x500, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x15, 0x8c, &(0x7f0000000340)="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"}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) prctl$PR_SVE_SET_VL(0x32, 0x381a5) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x11, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000011008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 972.826070][T31516] syz-executor.3 sent an empty control message without MSG_MORE. 14:20:09 executing program 4: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private0={0xfc, 0x0, [], 0x1}, 0x23}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x6000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r3, 0x917, 0x0, 0x1, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x3c}}, 0x0) 14:20:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x69, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6, 0x80000) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x3, 0x1, 0x3, "f3592552a8b2bfa4fe23dbb2b35ad6c1478504b4bf737d30325dd2f5fb9aa8c2", 0x37303250}) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) ioctl(r4, 0x0, &(0x7f0000000140)="b257dea9ed174d700d63cd2b5bccc0c0711bafd6f0bef07fdbb897827b9124de657fabee7ab5a8") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:09 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0xffffff1f, 0x79360200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1203}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) socketpair(0x1e, 0x5, 0xfffffff8, &(0x7f0000000000)={0xffffffffffffffff}) accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000012008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000014008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x117, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:10 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r4 = dup3(r0, r0, 0x80000) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000080)) fchmodat(r4, &(0x7f0000000000)='./file0\x00', 0x30) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x30100) ioctl$SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, &(0x7f0000000140)=0x6b93) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000025008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) ptrace$setopts(0xffffffffffffffff, r6, 0x6, 0x30) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, r5, 0x0, 0x0, 0x100}, 0x400, 0x0, 0x10000, 0x3728244e, 0xffffffffffffffff, r6}) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x12c, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:10 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) restart_syscall() 14:20:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae36", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x2, 0x22}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000002f008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 973.981539][T31607] __nla_validate_parse: 28 callbacks suppressed [ 973.981560][T31607] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000044008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 974.085865][T31607] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 974.134471][T31607] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x8800, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:10 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x9) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x2ce1, &(0x7f00000002c0)={0x0, 0x9709, 0x2, 0xffffffd}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)=0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r6, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae36", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000047008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 974.398114][T31641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 974.523507][T31649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 974.558545][T31641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) ptrace$setopts(0xffffffffffffffff, r6, 0x6, 0x30) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, r5, 0x0, 0x0, 0x100}, 0x400, 0x0, 0x10000, 0x3728244e, 0xffffffffffffffff, r6}) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:11 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11, 0x0, 0x84}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r4 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x4000, 0x44) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x800, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000000c0)=r5, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) nanosleep(&(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb000, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae36", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000005b008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 974.988055][T31675] validate_nla: 14 callbacks suppressed [ 974.988075][T31675] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 975.086549][T31674] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000073008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 975.189263][T31687] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.5'. 14:20:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 975.292765][T31692] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.5'. [ 975.294857][T31693] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 975.421413][T31697] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x4c, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000001e018188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 975.583514][T31708] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x69, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 975.823044][T31717] netlink: 'syz-executor.5': attribute type 105 has an invalid length. [ 975.853372][T31722] netlink: 'syz-executor.5': attribute type 105 has an invalid length. 14:20:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) ptrace$setopts(0xffffffffffffffff, r6, 0x6, 0x30) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, r5, 0x0, 0x0, 0x100}, 0x400, 0x0, 0x10000, 0x3728244e, 0xffffffffffffffff, r6}) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010040088040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x117, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:13 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x87, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@tipc, 0x0, 0x800, 0x1, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000338000/0x2000)=nil, 0x2000, 0xe, 0x50, r6, 0x10000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 976.562513][T31730] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x12c, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 976.672498][T31730] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010011e88040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:13 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1d5f925afdb4"}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5e6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000380)={0x0, 0x5, 0x0, [0xffffffff, 0x8739, 0xffff, 0x20, 0x100], [0x100000001, 0x8, 0x6d35, 0x3a38, 0x800, 0x4, 0x8, 0x3, 0x7f, 0x1, 0x26, 0x80000001, 0x40, 0x5, 0x8001, 0x81, 0x8, 0x800, 0x8, 0x2, 0x8, 0x6, 0x8e000, 0x20, 0x4, 0x4, 0x7, 0x5, 0x1, 0xffff, 0x9, 0x5, 0x8, 0xfd, 0x1000, 0x1000, 0xde, 0x7f, 0x7fff, 0x2, 0x0, 0xfffffffffffff569, 0xfce, 0x7f, 0x4, 0x800, 0x1, 0x5, 0x3f, 0x80000001, 0x4, 0x184, 0x1da6aa99, 0x10001, 0xa1, 0x3, 0x4, 0x7, 0x1000, 0x3, 0x4, 0x3, 0x7, 0x100000001, 0x6, 0x7ff, 0x9, 0x400, 0x0, 0x1, 0x1ff, 0x3, 0x8, 0x8, 0x2, 0x0, 0x1000, 0x100, 0x0, 0x401, 0x4, 0x4, 0xfff, 0x100, 0x3, 0x3, 0x3, 0x9, 0x40, 0x2, 0x54, 0x5, 0x2, 0xdfdb, 0x10001, 0x8000, 0x2, 0xac, 0xffff, 0x9, 0x0, 0x5, 0xcf95, 0x6, 0x8, 0x5, 0x8d, 0x0, 0x5, 0xffffffff, 0x100000001, 0x1a, 0x10000, 0x1f, 0x3, 0x80000001, 0x7, 0x40, 0x6d9, 0x4, 0x1]}) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x76, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r6, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x2, 0x800, 0xc3, 0x22, 0x976, 0xfa}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r6, 0xd25, 0x2, [0xb9, 0x3]}, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 976.856063][T31754] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:13 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000340)={{r3}, r5, 0x31, @inherit={0x78, &(0x7f0000000080)={0x0, 0x6, 0x3, 0x3, {0x0, 0x10000, 0x9ad, 0x0, 0x8}, [0x20, 0x4, 0x0, 0x1, 0x7, 0xf7]}}, @name="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010028188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 977.155168][T31779] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000001e018188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{0x2}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:14 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010038188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:14 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000000)={0xc, {0x1, 0x5, 0x9f, 0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 977.558896][T31802] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 977.583553][T31812] team0: Cannot enslave team device to itself 14:20:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010048188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{0x3}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:14 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x440000, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000002380), &(0x7f0000000140)=0x80) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002300)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "cb3aacd1f6d2b5c90369d8b6e1"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040050}, 0x4040080) r2 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r2, &(0x7f0000000000), 0x9708, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000002200)={0xa, 0x4e23, 0xe39, @empty, 0x551a}, 0x1c) openat$full(0xffffffffffffff9c, &(0x7f0000002280)='/dev/full\x00', 0x18141, 0x0) pipe(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDDELIO(r5, 0x4b35, 0x5) write$P9_RFSYNC(r4, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@add_del={0x2, &(0x7f00000022c0)='veth1\x00'}) 14:20:14 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010058188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:14 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x0, 0x5000000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) 14:20:14 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r4) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000340)="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", 0x1000, 0x40, 0x1}, 0x7f) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d02, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{0x0, 0x2}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010068188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:15 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000340)={0x0, 0x200, 0xfff, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000740)={0x3, 0x8, @start={0x0, 0x0, "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", "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"}, [0xffffffff80000000, 0x6, 0x800, 0x5, 0x100000001, 0x7fffffff, 0x4, 0x8001, 0x7f, 0x9, 0xffffffffffff7fff, 0x1, 0x20, 0x482f753, 0x7, 0x9, 0x1, 0x8001, 0x8, 0x101, 0x2, 0x400000000000000, 0x8, 0x5, 0x2, 0x5, 0x3ccc, 0x5, 0x3, 0x9, 0x80, 0x8, 0x80000000, 0xffff, 0x80000000, 0x8, 0x3, 0x8, 0x1, 0x0, 0x7f, 0x7, 0x7, 0xffff, 0x9, 0x4, 0x10001, 0x8, 0x51, 0x7ff, 0x6, 0x72, 0xffff, 0x80, 0xfffffffffffff800, 0x101, 0x7, 0x1, 0x6, 0x959, 0x1ff, 0x1, 0x42, 0x10000]}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001180)={0x14, 0x4, {0x6, @usage=0x9, r5, 0x8, 0xbe8, 0x8, 0x6, 0x7, 0xb2, @struct={0x81, 0x10000}, 0x4, 0x1, [0x800, 0x9, 0xcf8, 0x90, 0x2, 0x8]}, {0x3f, @struct={0x9, 0x10001}, r6, 0xffffffffffffff46, 0x843b, 0x10000, 0x6c3c6c3f, 0x1000, 0x463, @usage=0x8, 0x101, 0x5, [0x1, 0x4, 0x7, 0x2, 0x3, 0x80000000]}, {0x23, @usage, 0x0, 0x28, 0x7ff, 0x4f6a, 0x1ff, 0x0, 0x2c, @usage=0x5, 0x5, 0xa, [0x2, 0x1f, 0x401, 0x8, 0x1, 0x10000]}, {0x5514, 0x6, 0x1d9}}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{0x0, 0x3}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010078188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:15 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x0, 0x5000000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) 14:20:15 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x80000001) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0xffffffffffffffff) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) 14:20:15 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x80044df9, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000002c0)) r4 = io_uring_setup(0x196, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x2e2) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000300)={{0x0, 0x6, 0x310, 0x3}, 0x0, [0x1, 0x0, 0x8b1, 0x0, 0x100000000, 0x8, 0x80000001, 0x0, 0x80000000, 0x7fffffff, 0xfffffffffffffff9, 0x3ff, 0x16, 0x80, 0x0, 0x2, 0xe1, 0x0, 0x81, 0x1, 0x8, 0x3, 0x100000001, 0x8b, 0x0, 0x1, 0x101, 0xca, 0x0, 0x7, 0x401, 0x0, 0x0, 0x1, 0x5, 0x31, 0x5, 0x9, 0x5, 0x80, 0x439, 0x7, 0x0, 0x10001, 0x0, 0xc0, 0xe37, 0x0, 0x9, 0x0, 0xffff, 0x81, 0xec53, 0x0, 0x74a, 0x69, 0x502, 0x0, 0x100000001, 0x6, 0x7, 0x2c296f1f, 0xffffffff, 0x8000, 0x800, 0x0, 0x10000, 0x81, 0x9, 0x8000, 0x7, 0x7, 0xc0, 0x2, 0xf0, 0x3, 0xfef, 0x1, 0x0, 0x100, 0x0, 0x1, 0x7, 0x9, 0x7ff, 0x1, 0x0, 0x3, 0x4, 0x7, 0x18000, 0x0, 0x4, 0x7fffffff, 0x0, 0x6, 0xfff, 0x0, 0xffff, 0x0, 0x9, 0x200, 0x0, 0x4, 0x5f5d, 0x9, 0x2, 0x2800000000000000, 0xff, 0x3, 0x0, 0x8000, 0xff, 0x100000000, 0x5, 0x9, 0xf7ff, 0xffff, 0x10001, 0x4, 0x22, 0x2, 0x5, 0x0, 0x1ff, 0x8, 0x69, 0x101]}) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) 14:20:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010088188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 979.278434][T31938] __nla_validate_parse: 26 callbacks suppressed [ 979.278455][T31938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 979.445474][T31942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:16 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, 0x0) open(0x0, 0xc2c02, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x15000, 0x2101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r3 = dup(r2) ioctl$IOC_PR_PREEMPT(r3, 0x80026101, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000002080), 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x0, 0x4, 0x0, 0x3f}) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0xfffffffffffffffd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x2bcf) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) 14:20:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010098188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) [ 979.706414][T31967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100a8188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 979.805542][T31971] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 979.833426][T31976] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) 14:20:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 980.029343][T31985] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100c8188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 980.106997][T31986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 980.133506][T31985] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 980.177463][T31993] validate_nla: 8 callbacks suppressed [ 980.177485][T31993] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100e8188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:17 executing program 2 (fault-call:13 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 980.521723][T32002] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 980.558113][T32004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:17 executing program 4: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x0, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x100000000}, 0xf) close(r1) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) add_key(0x0, 0x0, &(0x7f0000000a80)="ed4b7f83768fc455d116fc1f678e435f60b4446af863dd5c4739963d3df806e603f82ac8fd970d4e4a3fa0973250aa2e91cd9b9b5a0aa1d1e02f253f0bb13b8ac04f40e362d58a2cdf245f150cc5d39c1d1bfb2d8f021b718406e664", 0x5c, 0xfffffffffffffffd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f00000005c0)=[&(0x7f0000000000)='F\x9eI\xa3', &(0x7f00000001c0)='/dev/dlm-monitor\x00', &(0x7f0000000700)='\x8c\xd1-\xf2\xebz\xe5\xfb\xe6\xcf\xd5\r\x8c\xa7\f&\x97\x13\x80\x1dmP\xf4\x94?|\xcc\x02}\n[\x9a\xc1\xd5\x9a\x9d\xf0\xf0\xfe\xfb\xc6tB\x8dA\xc4\xdf\x92\x1a\x87\x11M\xc5j\xa6\xbev\xd7\xbd\f%{\xd6\xd0\xf2U,\x17\xe4NI\xdeq\x10\xc4\x91\xc8~\x0e\x9b\x90vL\xa4\xee\xbbW\x9a\xb3I\x98\x8f\xa9kA\xba\xfcr\xc57\xa4D\x03r\x19\x82Z\xcd\x82rx\xa9\xdcUqO\xdfOgh\x98\xd3M\xb4\x17\x9e\x8d\x9c5\xb1VI\xe2\xb0\x16;\x9a\xba\xe1r\xe0>\f\xfa\xec%=\x06v\x83\xe1\xbb{\x05\x9c\x83o\x9b\xc9*\x81;@\xccC\xc0\xe1p\xdds\a\xee\xfel\xadv\x04MN\x19)\xfa\x8d\x9b9\n\x98Y\x14\xa0Tb\xa1\a)\xd1\x1e\x88\xaf\xe2t\x7f\x1cs.\x9e\xebb\xb44\xce(\x15\xcfU\xc45\xda\xacG\xa1\xa2{\xa5}b1Q\xdd\xca\x85\x01\x927qL\xb2\x98N\xa1\xac\x9f\x1f\x99\x03S_\xf6,\xe0\xf4\xa1hM', &(0x7f0000000300)=',\rH\xd1\xc1\x12tT\xa30)\x00', &(0x7f00000003c0)='{#\x91^\x00', 0x0]) ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:20:17 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000005c80)={0x0, 0x0, &(0x7f0000005c40)={&(0x7f0000000200)=ANY=[], 0x5}}, 0x0) connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0xffe5, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x800, @ipv4={[], [], @broadcast}, 0x7f}], 0x1c) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 980.653425][T32006] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 980.674376][T32004] FAULT_INJECTION: forcing a failure. [ 980.674376][T32004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.716125][T32004] CPU: 1 PID: 32004 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 980.724610][T32004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.734689][T32004] Call Trace: [ 980.737991][T32004] dump_stack+0x107/0x163 [ 980.742357][T32004] should_fail.cold+0x5/0x1f [ 980.746987][T32004] _copy_from_user+0x2c/0x180 [ 980.751693][T32004] __copy_msghdr_from_user+0x91/0x4b0 [ 980.757094][T32004] ? __ia32_sys_shutdown+0x70/0x70 [ 980.762242][T32004] ? mark_lock+0xf7/0x1720 [ 980.766703][T32004] sendmsg_copy_msghdr+0xa1/0x160 [ 980.771761][T32004] ? do_recvmmsg+0x6c0/0x6c0 [ 980.776383][T32004] ? lock_chain_count+0x20/0x20 [ 980.781268][T32004] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 980.787286][T32004] ___sys_sendmsg+0xc6/0x170 [ 980.791905][T32004] ? sendmsg_copy_msghdr+0x160/0x160 [ 980.797252][T32004] ? __fget_files+0x2c1/0x430 [ 980.801966][T32004] ? lock_downgrade+0x6d0/0x6d0 [ 980.807448][T32004] ? __fget_files+0x2e3/0x430 14:20:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 980.812877][T32004] ? __fget_light+0xea/0x280 [ 980.817537][T32004] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 980.823818][T32004] __sys_sendmmsg+0x195/0x470 [ 980.828535][T32004] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 980.833593][T32004] ? lock_downgrade+0x6d0/0x6d0 [ 980.838484][T32004] ? ksys_write+0x12d/0x250 [ 980.843055][T32004] ? __mutex_unlock_slowpath+0xe2/0x610 [ 980.848634][T32004] ? wait_for_completion_io+0x260/0x260 [ 980.854217][T32004] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 980.860490][T32004] ? vfs_write+0x18e/0xa80 [ 980.864942][T32004] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 980.871215][T32004] ? fput+0x2a/0x50 [ 980.875665][T32004] __x64_sys_sendmmsg+0x99/0x100 [ 980.880646][T32004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 980.886574][T32004] do_syscall_64+0x2d/0x70 [ 980.891013][T32004] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 980.897420][T32004] RIP: 0033:0x45e149 [ 980.901343][T32004] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.920975][T32004] RSP: 002b:00007f21240fac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 980.929421][T32004] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000045e149 [ 980.937445][T32004] RDX: 04924924924926d3 RSI: 0000000020000200 RDI: 0000000000000007 [ 980.945444][T32004] RBP: 00007f21240faca0 R08: 0000000000000000 R09: 0000000000000000 [ 980.953444][T32004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 14:20:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100f8188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 980.961429][T32004] R13: 00000000016afb7f R14: 00007f21240fb9c0 R15: 000000000119bf8c [ 981.063391][T32024] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010108188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 981.438442][T32041] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:18 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x2703, &(0x7f00000002c0)={0x0, 0x0, 0x11, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40500, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @adiantum, 0x8, @desc1='\x00\x00\x11\x11\"\"33'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_setup(0x56b5, &(0x7f0000000080)={0x0, 0x3cee, 0x0, 0x0, 0x1c9, 0x0, r1}, &(0x7f00009fd000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x3ebf, 0x0, 0x2, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_RELEASE(r6, 0x6431) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) fcntl$dupfd(r5, 0x406, r7) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010488188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x2}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 981.760813][T32053] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:18 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000440)=""/185, 0xb9}], 0x4, 0x81, 0x9a6, 0x18) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:20:20 executing program 4: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x0, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x100000000}, 0xf) close(r1) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) add_key(0x0, 0x0, &(0x7f0000000a80)="ed4b7f83768fc455d116fc1f678e435f60b4446af863dd5c4739963d3df806e603f82ac8fd970d4e4a3fa0973250aa2e91cd9b9b5a0aa1d1e02f253f0bb13b8ac04f40e362d58a2cdf245f150cc5d39c1d1bfb2d8f021b718406e664", 0x5c, 0xfffffffffffffffd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f00000005c0)=[&(0x7f0000000000)='F\x9eI\xa3', &(0x7f00000001c0)='/dev/dlm-monitor\x00', &(0x7f0000000700)='\x8c\xd1-\xf2\xebz\xe5\xfb\xe6\xcf\xd5\r\x8c\xa7\f&\x97\x13\x80\x1dmP\xf4\x94?|\xcc\x02}\n[\x9a\xc1\xd5\x9a\x9d\xf0\xf0\xfe\xfb\xc6tB\x8dA\xc4\xdf\x92\x1a\x87\x11M\xc5j\xa6\xbev\xd7\xbd\f%{\xd6\xd0\xf2U,\x17\xe4NI\xdeq\x10\xc4\x91\xc8~\x0e\x9b\x90vL\xa4\xee\xbbW\x9a\xb3I\x98\x8f\xa9kA\xba\xfcr\xc57\xa4D\x03r\x19\x82Z\xcd\x82rx\xa9\xdcUqO\xdfOgh\x98\xd3M\xb4\x17\x9e\x8d\x9c5\xb1VI\xe2\xb0\x16;\x9a\xba\xe1r\xe0>\f\xfa\xec%=\x06v\x83\xe1\xbb{\x05\x9c\x83o\x9b\xc9*\x81;@\xccC\xc0\xe1p\xdds\a\xee\xfel\xadv\x04MN\x19)\xfa\x8d\x9b9\n\x98Y\x14\xa0Tb\xa1\a)\xd1\x1e\x88\xaf\xe2t\x7f\x1cs.\x9e\xebb\xb44\xce(\x15\xcfU\xc45\xda\xacG\xa1\xa2{\xa5}b1Q\xdd\xca\x85\x01\x927qL\xb2\x98N\xa1\xac\x9f\x1f\x99\x03S_\xf6,\xe0\xf4\xa1hM', &(0x7f0000000300)=',\rH\xd1\xc1\x12tT\xa30)\x00', &(0x7f00000003c0)='{#\x91^\x00', 0x0]) ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:20:20 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x540a, &(0x7f0000000080)={0x0, 0x0, 0x11, 0x1, 0x4000, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000984000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0xffffff1f, 0x79360200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1203}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xdbf9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffb}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) io_uring_enter(r4, 0x3820, 0x0, 0x2, 0x0, 0x31) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x3}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000104c8188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x2) [ 984.005187][T32087] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x4}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x3) 14:20:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010608188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:20 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r2 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x700) r5 = accept4$packet(r0, &(0x7f0000000000), &(0x7f0000000080)=0x14, 0x80000) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0x3, 0x6}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 984.241938][T32107] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x5}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 984.322734][T32114] __nla_validate_parse: 7 callbacks suppressed [ 984.322756][T32114] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 984.357610][T32109] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:21 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 984.416397][T32114] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010688188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 984.482980][T32129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 984.625109][T32143] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x2) 14:20:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x6}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x4) 14:20:23 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000789000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000106c8188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 986.920445][T32152] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 986.943482][T32153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 987.000974][T32159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 987.060243][T32166] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 987.071835][T32170] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:20:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010748188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:23 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000a86000/0x3000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 987.113713][T32159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 987.116041][T32166] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x7}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x5) 14:20:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x27, 0x4, 0x0) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000240)=""/144, &(0x7f0000000000)=0x90) syz_usb_connect(0x3, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x61, 0xcd, 0x85, 0x40, 0x403, 0xe0e8, 0x4b0c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x71, 0x4b, 0xca}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) [ 987.321052][T32192] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:24 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x1) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x8}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x6) 14:20:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000107a8188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 987.682775][T32224] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 987.709838][T10024] usb 5-1: new high-speed USB device number 20 using dummy_hcd 14:20:24 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1c74, &(0x7f00000002c0)={0x0, 0x453, 0x11, 0xfffffffd, 0x5a7}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r3, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r3) keyctl$get_persistent(0x16, 0xee01, r3) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000000)={@loopback, @multicast2}, 0x8) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x9}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x7) 14:20:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188020f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:24 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) io_uring_enter(r0, 0x6455, 0x300a, 0x1, &(0x7f0000000000)={[0x8]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0xe}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 988.054377][T32246] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 988.099067][T32246] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 988.145245][T32246] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 988.154376][T10024] usb 5-1: unable to get BOS descriptor or descriptor too short 14:20:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x8) [ 988.430724][T10024] usb 5-1: New USB device found, idVendor=0403, idProduct=e0e8, bcdDevice=4b.0c [ 988.460522][T10024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.490173][T10024] usb 5-1: Product: syz [ 988.494476][T10024] usb 5-1: Manufacturer: syz [ 988.499093][T10024] usb 5-1: SerialNumber: syz [ 988.561735][T10024] ftdi_sio 5-1:253.0: FTDI USB Serial Device converter detected [ 988.601462][T10024] usb 5-1: Detected FT-X [ 988.779897][T10024] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 988.799844][T10024] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 988.837873][T10024] ftdi_sio 5-1:253.0: GPIO initialisation failed: -71 [ 988.874594][T10024] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 988.913025][T10024] usb 5-1: USB disconnect, device number 20 [ 988.975880][T10024] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 989.010546][T10024] ftdi_sio 5-1:253.0: device disconnected [ 989.579686][T10024] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 990.039838][T10024] usb 5-1: unable to get BOS descriptor or descriptor too short [ 990.319782][T10024] usb 5-1: New USB device found, idVendor=0403, idProduct=e0e8, bcdDevice=4b.0c [ 990.328943][T10024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.346041][T10024] usb 5-1: Product: syz [ 990.355651][T10024] usb 5-1: Manufacturer: syz [ 990.371184][T10024] usb 5-1: SerialNumber: syz 14:20:27 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x5ff, &(0x7f0000000040)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="9c180b85add1e6e95e87101a5464235610229b7449"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r0, 0x0, 0x0) io_setup(0x5d, &(0x7f0000000080)=0x0) io_submit(r6, 0x200002a5, &(0x7f0000000640)) 14:20:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188030f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0xf}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:27 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x581e, 0x11, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006ef000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syncfs(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r4 = syz_io_uring_setup(0x87, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r6, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000040)={0x24000, 0x7fffffff}) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x10010, 0xffffffffffffffff, 0x0) 14:20:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x9) [ 990.429823][T10024] usb 5-1: can't set config #253, error -71 [ 990.457847][T10024] usb 5-1: USB disconnect, device number 21 [ 990.532267][T32303] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 990.563526][T32303] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 990.586674][T32305] __nla_validate_parse: 22 callbacks suppressed [ 990.586695][T32305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 990.638311][T32312] fuse: Bad value for 'group_id' 14:20:27 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0xe8e46000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 990.699877][T32303] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 990.720377][T32313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x60}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 990.763061][T32325] fuse: Bad value for 'group_id' [ 990.779220][T32313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188050f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 990.849337][T32322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 990.871643][T32313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:27 executing program 4: r0 = socket(0x23, 0x80803, 0x0) write(r0, &(0x7f0000000000)="120000001a003517fc85bc00fef6000d0a0d", 0x12) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0xffffff1f, 0x79360200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1203}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@setlink={0x28, 0x13, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x24, 0x2080}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x45) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000240)={{0x0, 0x6, 0xffffffffffffff33, 0x7, 0x4, 0x8b, 0x3, 0xff, 0x7, 0x7fffffff, 0x8, 0x4a, 0x6, 0x100000001, 0xb973}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:20:27 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x8001, 0x400000) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004041) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 990.997812][T32344] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xa) 14:20:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0xf0}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188060f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 991.246680][T32348] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 991.333084][T32361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:28 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000000)=0x200) 14:20:28 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:28 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0xfffffffffffffffd) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:28 executing program 3: ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f00000000c0)={0xff, 0x0, 0x2008, 0x80000001, 0x5, {0x9e, 0x7fffffff}, 0x1}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x10000, 0x2, 0x85a}, &(0x7f0000000080)=0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 992.201939][T32376] validate_nla: 5 callbacks suppressed [ 992.201962][T32376] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 14:20:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x300}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 992.267055][T32367] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 992.289361][T32372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:28 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188070f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000002c0)={0x3, 0x5, @status={[0x2, 0x10000, 0x3, 0x8, 0x8, 0x7]}, [0x3f, 0x9, 0x7, 0x4000000000000000, 0x9, 0x1, 0x3, 0x2, 0x0, 0x1, 0x8, 0x6, 0x3, 0x19, 0x7fff, 0x3ff, 0xffffffffffffffff, 0x6, 0x8001, 0x6, 0x6, 0x6, 0x8, 0x2, 0x10001, 0x5, 0x80000001, 0x5, 0x953, 0xfff, 0xfffffffffffffffb, 0x800000000000000, 0x3f, 0x1, 0x8be, 0x1ff, 0x3, 0xfb, 0x2, 0x517a0fc8, 0x5, 0x2, 0x6de, 0x2, 0xc0, 0xb80, 0xed64, 0x401, 0xc93b, 0x20, 0x6, 0x8, 0x8, 0x68c8, 0x2, 0x1f, 0x3, 0x1, 0x8, 0x4, 0x4, 0x6, 0x6, 0x1]}) recvfrom(r0, &(0x7f0000000100)=""/246, 0xf6, 0x20000040, &(0x7f0000000d00)=@nfc={0x27, 0x1, 0x2, 0x6}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x5, @empty, 0x7ff}, @in={0x2, 0x4e24, @private=0xa010102}], 0x2c) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffff1f, 0xf803, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}]}}}]}, 0x5c}}, 0x0) 14:20:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xb) 14:20:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x500}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 992.558189][T32447] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:29 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x901, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 992.599360][T32448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:29 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r3, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000000)) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:29 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11, 0x0, 0x375}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 993.154964][T32447] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 993.198159][T32449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 993.240392][T32455] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 993.260166][T32447] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x5a1}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188080f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002a000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000300)="b9800000c00f3235000100000f3036363e0f01c444a7f3420f1ed2c74424000d000000c74424023a530000c7442406000000000f011c2447d9ea640f01dfc44201b7afc7e10000260f01cf420f01f8", 0x4f}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x14100, 0x0) 14:20:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xc) [ 993.503387][T32496] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 993.551518][T32501] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 993.687034][T32496] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 993.715412][T32496] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x600}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100081880a0f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xe) 14:20:30 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x62a1, &(0x7f0000000140)={0x0, 0x40, 0x1, 0x0, 0x40120, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a7d000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x700}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 994.012032][T32523] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xf) 14:20:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188100f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x900}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:30 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0xe9cc, 0x20}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000240)={{0x4, @addr=0x10000}, 0x8, 0x10001, 0x100000001}) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000028000b0f0000000000000000000000008775523f4cb6a823b353bfeb2b5749befdd0b6c49d86389037eeea43b21067957309fa73acd8f9613374fee7009fead9acf83a6502ef45cdb60a0555861a876d856decbe9043dd0071396292c630b0", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000"], 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', r6, 0x8000, 0x20, 0x1f38, 0x7ff, {{0x27, 0x4, 0x1, 0x24, 0x9c, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @remote, {[@generic={0x88, 0x9, "6ea81f6164807c"}, @rr={0x7, 0x17, 0x44, [@local, @multicast2, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @lsrr={0x83, 0x17, 0xe6, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @local, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x1c, 0x3f, 0x3, 0x1, [{@private=0xa010102, 0x800}, {@local, 0x7}, {@multicast1, 0xffffff2f}]}, @lsrr={0x83, 0x1b, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010101, @multicast2, @multicast2, @rand_addr=0x64010102]}, @rr={0x7, 0x17, 0x38, [@multicast1, @remote, @rand_addr=0x64010102, @loopback, @broadcast]}]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000280)={0x10}, 0x10) 14:20:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x10) 14:20:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/249, 0xf9}, {&(0x7f0000000780)=""/131, 0x83}, {&(0x7f0000000240)=""/62, 0x3e}], 0x8}, 0x40010143) openat$vimc2(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/video2\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x20040, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r1}}, 0x48) 14:20:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0xe00}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:31 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x11) 14:20:31 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0xffffff1f, 0x79360200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1203}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) ftruncate(r1, 0x10000) r2 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x2, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0x5, 0x18, [], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x8, 0x4, 0x0, 0x6}, {0xfffd, 0xa3, 0x0, 0x7fffffff}, {0x6, 0x4, 0x81, 0x6}, {0x1f, 0x4, 0xc2, 0x3}, {0x2, 0x1f, 0xf2, 0x7}, {0x0, 0x2, 0xf7, 0x4d}]}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x2, 0x4, &(0x7f0000000080)=0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0xf00}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188140f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x60) 14:20:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000140)) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)=0x800) r3 = dup(0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x400000000000085, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = dup(r4) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x901, &(0x7f0000000040), 0x8) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008880}, 0x4004841) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000440)=0x8) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x0, 0x804, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x18}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) openat$sysctl(0xffffffffffffff9c, &(0x7f0000001a40)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) 14:20:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x2105}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188250f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:32 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbc, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) mkdir(0x0, 0x100) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1e7840, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x8000}) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000024000b0f000004000000010000000000", @ANYRES32=r5, @ANYBLOB="00002000ffffffff000000000800010074626600380002000c000400444d816f0491823f2800010000000000000000008b0f000000000000000000000000000000000000000001"], 0x64}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB='d\x00\x00\x00%'], 0x64}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) 14:20:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xc0) 14:20:32 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x100000000) r2 = syz_io_uring_setup(0x8c, &(0x7f0000000140)={0x0, 0x4524, 0x1, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006be000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000000c0)={0x4, 0x7ff80000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x3f00}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 995.815849][T32638] __nla_validate_parse: 33 callbacks suppressed [ 995.815870][T32638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188440f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 995.933201][T32640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 995.944939][T32646] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 996.011758][T32640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:32 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 996.053810][T32640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x6000}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188470f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xf0) 14:20:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x7000}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:33 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd70ffff0005000700000000000000001d26b836b5af5ffb63d51cf2e007d9366219b2610d9b3ded5251c422696d74cc6507c6fe0d52d602e7d830e5d50084505668c708a45223c3e5147d20d9df14ba12d9771a2ec3540e7b2ef451663a545992b274c5d8de6ca041d7165508b4ab09ac610ffa5ad4b71918036fd1cbd602fa9130c170bcda2703c91b3ce4a7f5ca88e96c359fb08f5c4b2c51c15e8d3dce29a16743ffd8105b1d2380aeb5d5d063582859bb64f71495"], 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x80) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 996.361079][T32677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 996.459952][T32681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 996.483182][T32677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100081885b0f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 996.578897][T32699] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 996.635753][T32701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188250f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:33 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) r3 = getpgrp(0x0) ptrace$pokeuser(0x6, r3, 0x80, 0x2) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000000)=0xfffffffb) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {0x7fff}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x300) 14:20:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040280ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:33 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000000)={0x1, 0x13, 0x20, 0x100000, "6084d266b576bf8cf237caa528bc2488413996583d68ddb12a93354628384675"}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 997.148461][T32726] team0: Cannot enslave team device to itself 14:20:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040380ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 997.209760][T32726] validate_nla: 27 callbacks suppressed [ 997.209779][T32726] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 14:20:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x500) 14:20:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 997.304658][T32726] batman_adv: batadv0: Adding interface: team0 [ 997.335759][T32726] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 14:20:34 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f00005ac000/0x4000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000340)={0x0, 0x0, @ioapic}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r3, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000080)={0xfff3, 0x5, 0x2, 0x8, 0x4, 0x3}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 997.461193][T32726] batman_adv: batadv0: Interface activated: team0 [ 997.505554][T32735] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 997.560954][T32746] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 997.613268][T32735] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:34 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000001f00)=[{{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/111, 0x6f}, {&(0x7f00000004c0)=""/80, 0x50}, {&(0x7f0000000540)=""/116, 0x74}, {&(0x7f00000005c0)=""/123, 0x7b}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/99, 0x63}], 0x9, &(0x7f0000001880)=""/148, 0x94}, 0x7}, {{&(0x7f0000001940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f00000019c0)=""/204, 0xcc}, {&(0x7f0000001ac0)=""/15, 0xf}, {&(0x7f0000001b00)=""/212, 0xd4}, {&(0x7f0000001c00)=""/69, 0x45}], 0x4}, 0x5}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001cc0)=""/181, 0xb5}, {&(0x7f0000001d80)=""/232, 0xe8}, {&(0x7f0000001e80)=""/51, 0x33}], 0x3}, 0xbb}], 0x3, 0x43, &(0x7f0000001fc0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000300)=0x100000000) r3 = socket(0x0, 0x803, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x24) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 14:20:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x2}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x600) 14:20:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040480ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:34 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000581000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 997.894906][ T308] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 997.939766][ T315] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 997.997109][ T308] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x700) 14:20:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040580ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x3}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 998.672750][ T335] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 998.688999][ T340] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:35 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000088e000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, 0x0, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x1) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x1f) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000a6f0dd92ea3577b18e321ad4fdab001000", @ANYRES32=0x0, @ANYBLOB="0312000000000000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x0) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000080)={{r0}, 0x7, &(0x7f0000000000)=[0xffff, 0x5, 0x0, 0xfffffffffffffffa, 0x7ff, 0x10000, 0x2], 0x80, 0x1, [0xffff, 0x200040000000000, 0x4, 0x6]}) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 998.755570][ T335] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x7}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x900) 14:20:35 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000001f00)=[{{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/111, 0x6f}, {&(0x7f00000004c0)=""/80, 0x50}, {&(0x7f0000000540)=""/116, 0x74}, {&(0x7f00000005c0)=""/123, 0x7b}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/99, 0x63}], 0x9, &(0x7f0000001880)=""/148, 0x94}, 0x7}, {{&(0x7f0000001940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f00000019c0)=""/204, 0xcc}, {&(0x7f0000001ac0)=""/15, 0xf}, {&(0x7f0000001b00)=""/212, 0xd4}, {&(0x7f0000001c00)=""/69, 0x45}], 0x4}, 0x5}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001cc0)=""/181, 0xb5}, {&(0x7f0000001d80)=""/232, 0xe8}, {&(0x7f0000001e80)=""/51, 0x33}], 0x3}, 0xbb}], 0x3, 0x43, &(0x7f0000001fc0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000300)=0x100000000) r3 = socket(0x0, 0x803, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x24) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 14:20:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040680ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:35 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r4 = open_tree(r0, &(0x7f00000001c0)='./file0\x00', 0x88000) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair(0x23, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0xfffffffb, @bearer=@l2={'ib', 0x3a, 'bond_slave_0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000c001) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x3b}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xa00) 14:20:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040780ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:36 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11, 0x0, 0x34e}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) ioctl$SNDCTL_TMR_SELECT(r3, 0x40045408) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:36 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0x800, 0x6, 0x84}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040880ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xb00) 14:20:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x54}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:36 executing program 4: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='d', 0x1}], 0x1}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x900, 0x0) r3 = dup(r0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r4, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="000228bd7000fbdbdf25030000000c00040006000000000000001c00078008000100", @ANYRESHEX=r4, @ANYBLOB="08000100", @ANYRES64=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200ff0f0000000000000c000800ffffe5ec45df00001c000300000001000000000000000c3c08000300000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4081) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x90) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1}, 0x40012043) 14:20:36 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r3, 0x8f4e4000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f0000000200)=0xa) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x10000, 0x0) exit(0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x80) fstat(r2, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/8, 0x8, 0x1, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) getpid() 14:20:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040980ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xc00) 14:20:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x69}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:37 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x8) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'geneve1\x00'}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0xffffd000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x5eb, 0x947, 0x7, 0x9, 0x7fff, 0xffffffffffffffff}) 14:20:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x8}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040a80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xe00) [ 1000.970058][ T507] __nla_validate_parse: 36 callbacks suppressed [ 1000.970079][ T507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:37 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @ethernet={0x6, @multicast}, @ethernet={0x1, @random="70e7e6d6b550"}, @llc={0x1a, 0x323, 0x2, 0x0, 0x40, 0x0, @random="5921656d32d9"}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='bond0\x00', 0x0, 0x8000, 0x6}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[@ANYBLOB="3800e7ff0ff9feffff8236790000000000000100f48e2510424406e76561284bacd57ba83d92d6f07a12d8db6cf844b2e23b786ead631b23f0de42023f5c51509195f4c0818843deae62f194817160c446c45bd12c6ea65071c8a63979b64f7497dc51a2df1b9e3dc0b6c0cd85122c67812e86dee80532073f3975a5ce6bfe885b73a1e04c551d40bfd0c85d412c2bc8", @ANYRES32=0x0, @ANYBLOB="0312000000000000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000340)={{r4}, "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"}) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000140)=0x7, &(0x7f0000000180)=0x4) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, &(0x7f00000001c0)={0x3}) [ 1001.050119][ T509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1001.076161][ T507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x3b}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040b80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 1001.121308][ T516] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1001.144949][ T509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1001.174737][ T509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x69}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xec0) [ 1001.465245][ T539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1001.537256][ T540] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1001.558175][ T539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1001.593930][ T545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:38 executing program 4: perf_event_open(&(0x7f00000000c0)={0x3, 0xffffffffffffffd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0xa2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) mkdir(&(0x7f0000000340)='./file0\x00', 0x1e7) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000580)) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r4 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000300)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x3, 0x4, {}, {0xffffffffffffffff}, 0x101, 0xcd6}) sendfile(r4, r4, &(0x7f0000000080), 0xa198) 14:20:38 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x84802, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x208b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000180)={0x1, 0x0, {0x6, 0x7, 0x8b, 0x5}}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x76, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x2, 0x800, 0xc3, 0x22, 0x976, 0xfa}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{0x1, 0x1}]}}, 0x16) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4010, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040c80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x3b}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xf00) 14:20:38 executing program 3: r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000001680)=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, 0xc) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) write$input_event(r5, &(0x7f00000000c0)={{0x0, 0xea60}, 0x4, 0x6ab7}, 0x18) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) utimensat(r7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x100) write$UHID_INPUT(r7, &(0x7f0000000340)={0x8, {"0cba730d97c3cbe485eaeedef9c3e8715b5c007b9436c099252aa44101717279f73b2cbad314358db9f4a8b60dc925517e97fab0ec5f495d8d1528aa40b6902175c34d0dbcc34e1fa33f5734db819877217cf1ca07aa336b9439e657f3c9dc1f46cc951c5c7f2a7dac999eb2ff2f16e525ab910e1a4a8e3f552702851715d0d8316ea263ea60fc3f79d61eb06a219153e80c40a0e83ea19846b67a6510adf2289300366ef38487f2493048204a8d950ca5d18c616f6c7d45c054f6674007d82b23c32e80407c37e46a9a9b39b7cf4b59f0dc8a496592a0a99d24fca6918bf281a39b56f1d7498e5a83273f7e0813eb91b172bfae4797647436acc89eed4ef1b1e608b3d01d3642a9bb7759a1cc34616c5c2bada59ff1609ee4b8f7709c5f5db90b65336b130321d38502e28650057959896e809bc726a3573bfd6d2ec1b3c13538cfe17d71a4130e235fe1b0c8fc511669d67f45a5e9e1313556096d292a40a1f96e568d5ef405ac8aa607ad4312e6068999d1adf7c350c9ab12bb9892318deaea5154c29ebd9be03069249a166dea505416ad119e28daeed0cf7b17018c856d0c7b330ac4b37532bd41c8b898ad27cc19c0a2efbd8673d86824c2088b1d1ae7451ba86bf0bc07672a14c6250f29730025624b7f3014e5c727afa50846c7cdbc4a19a6c189398d9dfac8beeb7b0a43bfe865b9d5ca375abb81edc5dcbb25dee911d63b0951d15e33368218b19cc015ff76747f4777bbc9d2f706fbd986500a438b8161751465f0d2be15d43ddecc20c639ce4b4a8b085355d17dd142adaa7969c59a9e4de8f8753342c22c87f804027fdbb605c19b053acf0527697b1b20555dd0dde3170870ce671b24350331119c9bfdfaeaeac31e8e2ad72fe7081fb68cdd41b653a4c22d500abd53c8c962b8820b82e4024122e81a29f658136451a68f6014a1246ad4ec477e2d280456999903a6e9fe463bb5f71e096ca499bb8275cd6d98aedcfe6fe803207107d6c138a2023f92d62ac3b57efb5c8f2d9add3be002a56ec7c635df2c535e9e465f102ad71bb6c98ab98eff2ad2d353742dcf986d32d6c01fd4ad59522aa3ecc90e0f6a513184ba9d38ab75cf171f872de959b875ec39c3a4f4bfc4afa0336c923fb3a8d2aafa1f16cac607b40f8ef7bbbc66c8d14ec36190bf22931a62d67c10fbd955993c2bdc8548e5e44d6dabe00b611ad5eab6e9888e8623f7ddaef6465fc836af7c8cb2887e838308680fb31f1395d1638fcba7013066fdeee5f1132db9b6380e990f154bc2511bcb65848b072a82897d23edbbdb636174e535f73d88d708db61a2bdf93693e7c954b61d7dd536962e81da3bfd15408ba430bba4a9b07351dcce687c57066a5bd4c1c0b1af322da069f3c68cec91e799c880505e2bc5b3c7b04b253057bc1cd9655eba1b242e1a5d619caf452732fd957d42755d90151b2dc67dc03a4b96630e9233cd2b92c8aed2992c843876a0630928677c3741334d53f8822c75119b0e2425d3a977c8e3129b857b768ff413c6d7530095510957b6a637700c9137291b658a59eed6e4c442ecb7fe34824e01178e9ab74380a42ef8bcfddaeae92c5e08d6fddfc0afa6fc42384f87bac01833eaf497e9f93bcdc8f451749e835504764c7bf105413ac391fefb63e38703d5b0ea103a144099c74e33b17a8e80a3c871e024fc7a1f04fc65f25224fcb6008ed61aaaef3a221e39a20a39c73f1d7638f8ff2a4ec3bfe67bd9987c71935a45be0d5a0f1d0112ca6e03fbf7022175d20ed19428bbb19b7a5584d8181956da8644f9e087ae51a638484c3271f7fba0562e2678384b75617fc934afd7af3c4a2ed3fa73617d7a37ed9d9a9e700b3b2fc4cb4dca27bea662d9c66ecd2b8ed884d1e4d9624404522708150e4222c55d962c587ecd55d77ed269a57e84853fa5a3e35156fdc9bfdc8491c2aed25157082fb93dec39c2046ace6208d217517572c723add153c79aac7ff41c393bf6e12131b4e02efdb1fb4cf8883288855b1945ec46b795356e0f0b6818b7d38dd851fc1fb2df5af8d0f58882ec79d2af4d876444692b57f7031cda29154b5c2d2802a08968880d599db35849d53e4c37db9d570bc577695efd1834b5d314358fd08a0aa27091805f76da83869dd298858575260f31ad7233090df1a8d8022c8db479bb13d4bcd7e0aadb646e230d7fe360f2d1369e6c6fb21d69061a0b2f3c868ca518b8a2343d5648233d2be720ca3a0763d2c81c55b3e693a80f058d9e7a367d76b409db8d01b2c7a2be6d4b36306ca4bf75a2be5e56144b984cdb627ec1ab4b02ffdfef7ab4648ffd8c08165970816c7ddb40a55aa1f5622a81a11096552510d4a1e8d9bfbcf6789b442348d72ed4c17157b026c8a60651b2919d02dfe92ebccb26d62370d2fac0c8fde14ddcf9c044d6867f6eb4f7e893873809261b728ead28724e71c8332df5e2dd89cf118d947db0bc61a19c7301f086ac93169e339dab7920ac103bc4e44f025a6e78641331f3b4120d77207b909a8a1b1c4dec064a0013f5cad8a28e9730832df6a53df57eb1b02fbba2aad681cfe4fe83a7c517b9aba010486e966c9901e028ed96e4c8b9f71f005d76b08f4d734a350899ea1bc23d29d9a4d6ede9dba24444895a1277924fd4513a4dd46e88601949f7b59869a1649f60ccd1e5d78e5fc0f9cba4972e985b874d2db2e9ed16e20a3479a5b1f8e18ca7ad9f0cf224c9b4088c5a687e6480b3e95873cdb22200facac34d39571a509a1e088409a595fbddcf85fa4380646e6e616f09287a6d9bb99d4c8fa3fbaf4b174c0540bc5aeebaedfd569b11f932c40420ef96fc431bfbc8a162d1a5084d83769fe17141d09924fc3c7f34c69f238eb7f1666764a57132f35b6b72264cf1eb82efd3c4edd1194c86220c0895209b53d165575ff52f9991b30aac4341016b1e81513a9844af047434272dd4c2f4fdf35602abd5bfd8f46ab23596fb01cb74994302c270eff70f0528f7d1d3da3270a03763390a514820f3e993ec1c8c869f2c0b0be825f624b41863c5876c04357cc99436d6fe394097f4f866da04fbe11dba3e733fef62f03f363a20351c9a70eb00445f6fc9f5bfd9b771c30d1af9e2b5e2f767f23401ce65eaa3b9370f836ac3be100fc0c7e35fb9e0932aaae779042baf716d415e83dddffd9845a563e9147c1bc8f38dab9a5d4f50e56e9e6632661e4398a608c955b83993970dc5aba8d3dd0ef5cd4f0839e7d7ebd68dda8113b0cde05addc78ad7369f31fbf03cb84e1f0c36c1096e4279e5baacd4be2b322308af487c44b4c927295d8e7490947c55cf96e9ce3db2db35b7b0f4fbe1bb4472f591a96d76afbb1084bc446c0ca30e5f14fd674d551039906b88a98f44131ebfe07c70b42d2d11acdfe051761789925a820550dd3bc68ad0cda684fc62492f321cee2769a47e4594a6d998d5205371e9c39a15da3ed1b69ff23db3806f29cf06b532292a1e0346b7df9a7bfcb54d682d707404b648a23f096f57c603ecb0eda8ed0b285e70dc91acbbee18a18df64f7fa79d8636be9bf34770f3c207cdbf4a14e1f609c37692999ebe26045871c806e596e7d22df119d67b78b8345e5b5bff02c224772cfd5259adcfe3b5ba5c871d01781e3c42c9e6f00445d259ce487fe0b3fe6a2482c7492b9c67a0a7a92a5a3c2c56ccb3696cdab00c42252630d7613985a2530c88b0aff3accfdcac317a1682e39683499ad3de136082b6b09fd87ec95a51ff7f57211afe0ba9b70ecc9c4da93e5b344ed60c8c23414671935b235aca93c6a087a217d40b39d442daac2a360b23300f4429157a3e1d89108ccd6b1c543c5e5cde179cafc1adaff765aa5143030176566a8c6328558fd8d2840ee9d2daefcc9d800f9f6e9964be87bb8c8a59b42224b69f5e346e15d243b0e67e7c92f1309c62dbfa76aefee387a72ee23ce959ba00e23b68333f8858777698c8668cc2e99a78df3a1f251aa4e1625cee966adf69c6813487edc435b966af77df654301222d2790a9832769cde4426b9e73ab68f5301933170f72e389ecb7851548918ca34a9a64597135306846d6bd34f6820a0d62b048dad8b8e8db83bab33a0cfc2a32b176de26625db54a00b3b2a0dc90cde96787c089c66393e3c5558bcdf7cf70b1eda4b1928ad5b44d9fd5e624efa0b0992ab06fc554f309c3e9c93dbc686ea800b5d97cbbd9d18bc2d9cd7d98707a7c6839c6aa3427d63f2c355887a9be7002e47ee70a97ba75d5356f29489b987b2d5cf51c7abbd62a3e660a42831dd5ba8cd1114b2044dc7903bbacdb8507d1ed7bb5cbb13c1acb2d4df0213a279e0b0cf00fed290c596b7af767f3f2724e15ceb9335d9f2f28dc5f2f8afca865499e8312cc75eedfa4647f71f0a77f5104d6b4c3a8bfb45e4e45776fdac1a64a385ebec04aec39dda9aaa910a2b0f00ff7de4f77238b1cc7557347b1a8217a34188ff685cc32dadd462c3265b7bf39750fc22afda251edb8a70d5362fb1c5981fa20bc44cb548c0a87d2f2fffa846dffb62733fbc77da10d1d6c3ae2f673c606bd86292552ec36381f7448a0d89f96fab8d2eb523f84ff745099ec320d798a6c55173ad5cd67b91dcb4e25e1e9e4432523f768af5e19ccbd1623deb71ba703856cf6630ff4fd7cbe928fe16313a9e5efad53e1debce0557535be1b978ccb38a8f123262ada12aac9d9c98ddafde887e579e10f0d666557b66f82c109cf3978015b21f0be86d0ddafce9675c3ed11b734f0a253a63782154d14137951b4a08efecd96c8e55f0b9baed5fc435bf681ef898722b778c12c27a211e93202871849b87684a138129b6a56e77b8dec920b7e68ca836f604b4d6762cb0b62ebcc673618da53c34c2bc9e1973ccf7720463d87f8f5a689b275e587a31afab67becb109834848b4d74562e2fa7f529da228cc30fafc3f90378803351011d75c24239253d107b4fc1d03b66225d7ae4f3632c02b2b48e6e5233d552843e42ee209a63f6f101cf267199d02cb5f47ecd72c56f18d27740ca6fc39a46c41138599a44ddce6a1571cfbe294955d114e0749dd705a48d0196c9f8e64a0bcdef0af09b90f567031a3e9e4f48b4d70ee70e458f679f8821499d64e4cb3a24b9985f8d5dcce3095d40aaa2f24b783a35a298e1635fe8f2695d0bb127db11148b57a024a347c31a98d959312c666ea38810e8be099f67a8b97ce453ed496b1cb933347aa17e93a70c7074e963bd63a2d0cc64a7c53924bb83bef8f166c0cdf2730dcb33f51e2ed87c056b367d49eaec3314ec30a592cdcc1016297bfd8626229376dc70445c4a301498af3c55c6962e17b3d433d14e35c08639431b29e6ff06f0a332a114a538c42264b052bb177c95fb016d62ddc8d143e263850ee2f973e10e8cb81cece9f1df74aae9e31f9e970dd8bb55c257144e4d79f73426e3b66930aaeab3b395756fbc69ee853416df61ebd872d1690f29d537b93280b99420e580b87124f9b739e7c7dee0bfce642492f61dd29675ce885b31f4327eb89eb050df8d9194525a300363818b9f6e5ec905bda217f07dc471c0316226fa5a1792cbda0a803cf95afd36e7ce6b9bf03c4a57460992aa80b9729a06f616a5af4cdbeeb87421f3f9c30f4204a86d2b7747677a78dfd2c200e36d3d1760ee20d2c2800c551d41b81c592717595378503d0d174cdb911b3fbb39650420cccccf95311aad1c5ac87a02e097c1975e2b6577edd685187abdaaa4b5888da8438ccd5b7a097ff6d7aaacd521a8e97", 0x1000}}, 0x1006) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x69}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x1100) 14:20:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040d80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:38 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x57) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 1002.365280][ T585] validate_nla: 22 callbacks suppressed [ 1002.365301][ T585] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1002.425013][ T595] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:39 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 1002.480184][ T585] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_DUMPABLE(0x4, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) r3 = memfd_create(&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x96L\x82\xdb9\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r', 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454d469f69df5d2000011000c4a400030000000000a594240700c83d00000000000000ff000000deab7bba00048100000000000000380003"], 0x3c) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x1000001, 0x11, r2, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x7}, &(0x7f0000000100)=0x8) r4 = pidfd_getfd(r1, r1, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000937000/0x1000)=nil, 0x1000}) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') 14:20:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x3f00) 14:20:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040e80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x2}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:39 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x91a9, 0x0, 0x1, 0x118}, &(0x7f0000b22000/0x4000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 1003.019213][ T621] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1003.051929][ T638] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:39 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000023e000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x3}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1003.095687][ T621] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:39 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES64, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00060000000000000300000009000100666c6f77000000000c000200080001008e5721"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 14:20:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188041080ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x5865) 14:20:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x4}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:40 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x87, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2ae}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f000009c000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r3, 0x8000000) syz_io_uring_complete(r4) syz_io_uring_setup(0x1e5e, &(0x7f0000000080)={0x0, 0x52d, 0x10, 0x2, 0x25e, 0x0, r0}, &(0x7f0000687000/0x3000)=nil, &(0x7f00007cc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x9, 0x2, &(0x7f0000000180)="f2645da8627c9756d91614c3b737f5c59acb2e88dfb4409a1301f9a17d3931c27f164c009719946664ddb3a153485bbb4ac2d9b6d199c3c01ffdfa18d11a2a6dfaa0ce30d3d57735d524498f21d0a870c228c8e0087168666561a347f53e5c9dac03bb05df0ad0ffd56483823d28", 0x1cff5c97, 0x0, 0x1, {0x3}}, 0xffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) [ 1003.453129][ T668] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1003.475320][ T672] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1003.516734][ T668] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x6000) 14:20:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188041180ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x5}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1003.851170][ T693] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:40 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xb) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r4, 0x0, 0x0) keyctl$get_persistent(0x16, r3, r4) setresuid(0x0, 0x0, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x10, 0xffffffffffffffff, 0xe3bc7000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188041280ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x6558) 14:20:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x6}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x100000000, 0x200000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) fchownat(r0, &(0x7f0000000180)='./file0\x00', r1, 0xee01, 0x1000) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000100)={0x8000, 0x5a, 0x8000, 0x3, 0xdda}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0x0}) exit_group(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x2000240e}], 0x1) 14:20:40 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x60240, 0x0) r0 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x2000000, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0xffffff1f, 0x79360200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1203}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0) mmap(&(0x7f0000249000/0x4000)=nil, 0x4000, 0x1000008, 0x810, r3, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x7}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x8100) 14:20:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188042580ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x100000000, 0x200000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) fchownat(r0, &(0x7f0000000180)='./file0\x00', r1, 0xee01, 0x1000) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000100)={0x8000, 0x5a, 0x8000, 0x3, 0xdda}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0x0}) exit_group(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x2000240e}], 0x1) 14:20:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x8}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:41 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x8b, &(0x7f00000002c0)={0x0, 0x0, 0x11}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000085d000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000080)={0x0, 0x0, [0x0, 0xed, 0x345f, 0x5]}) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14:20:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188044480ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xc000) 14:20:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x9}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:41 executing program 3: r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r3, 0x0, 0x0) ioctl$int_in(r3, 0x0, &(0x7f0000000000)=0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r4, 0xfffffffffffffffc}, 0x18) sendmmsg$alg(r0, &(0x7f00000000c0), 0x4924924924924d8, 0x0) 14:20:41 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioprio_get$pid(0x1, 0x0) 14:20:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188044780ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xc00e) 14:20:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0xe}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1005.416764][ T805] vxcan0: tx drop: invalid da for name 0xfffffffffffffffc 14:20:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0xf}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:42 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioprio_get$pid(0x1, 0x0) 14:20:42 executing program 3: r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r3, 0x0, 0x0) ioctl$int_in(r3, 0x0, &(0x7f0000000000)=0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r4, 0xfffffffffffffffc}, 0x18) sendmmsg$alg(r0, &(0x7f00000000c0), 0x4924924924924d8, 0x0) 14:20:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188045b80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xf000) [ 1005.723036][ T825] vxcan0: tx drop: invalid da for name 0xfffffffffffffffc 14:20:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x60}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:42 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioprio_get$pid(0x1, 0x0) 14:20:42 executing program 3: setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x0, 0x4e21, 0x8dd, 0xa, 0x0, 0x0, 0x3a}, {0x6, 0x0, 0x3ff, 0x300000000000, 0x6, 0x3, 0xff, 0xf1}, {0x8, 0x2, 0x8, 0x5}, 0x1f, 0x6e6bb5, 0x2, 0x1, 0x3, 0x2}, {{@in6=@private0, 0x4d6, 0x3c}, 0xa, @in=@multicast2, 0x0, 0x4, 0x2, 0x3f, 0x1, 0x1f, 0x5}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x9bf}}, 0x18) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) dup(r1) 14:20:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188046380ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 1006.019514][ T35] audit: type=1800 audit(1608474042.599:30): pid=844 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15752 res=0 errno=0 14:20:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xff03) 14:20:42 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioprio_get$pid(0x1, 0x0) [ 1006.212268][ T853] __nla_validate_parse: 55 callbacks suppressed [ 1006.212288][ T853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1006.248970][ T35] audit: type=1804 audit(1608474042.789:31): pid=849 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/782/file0/bus" dev="sda1" ino=15752 res=1 errno=0 14:20:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000001000818804d980ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 1006.476684][ T856] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1006.504353][ T856] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1006.550102][ T859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x2}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x109800, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, &(0x7f0000000100)) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x353800, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xfffffffffffffc51) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000080)=0x20006d26, 0x4) read(r0, &(0x7f0000000180)=""/170, 0xfffffffffffffc8f) 14:20:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x33fe0) 14:20:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb5bb9cca7480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x3}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1006.946019][ T880] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1007.106965][ T881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1007.117537][ T884] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:43 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x4000, 0x24) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000440)="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", 0x257}], 0x1}, 0x8000) sendmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x2000]}, 0x6) getsockname$packet(r4, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3d) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, @private1, 0x8001, 0x0, 0x0, 0x500, 0x539e7ba7, 0x200, r5}) listen(r0, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001ac0), 0x0, 0x20040040) [ 1007.176704][ T881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1007.259082][ T884] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1007.270560][ T881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1008.097680][ T35] audit: type=1800 audit(1608474044.680:32): pid=844 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15754 res=0 errno=0 [ 1008.150872][ T35] audit: type=1804 audit(1608474044.740:33): pid=899 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/782/file0/file0/bus" dev="sda1" ino=15754 res=1 errno=0 [ 1008.273962][ T849] syz-executor.3 (849) used greatest stack depth: 22344 bytes left 14:20:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x34000) 14:20:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9ccc6480ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x4}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:44 executing program 3: setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x0, 0x4e21, 0x8dd, 0xa, 0x0, 0x0, 0x3a}, {0x6, 0x0, 0x3ff, 0x300000000000, 0x6, 0x3, 0xff, 0xf1}, {0x8, 0x2, 0x8, 0x5}, 0x1f, 0x6e6bb5, 0x2, 0x1, 0x3, 0x2}, {{@in6=@private0, 0x4d6, 0x3c}, 0xa, @in=@multicast2, 0x0, 0x4, 0x2, 0x3f, 0x1, 0x1f, 0x5}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x9bf}}, 0x18) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) dup(r1) [ 1008.426424][ T905] validate_nla: 27 callbacks suppressed [ 1008.426445][ T905] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1008.469964][ T35] audit: type=1800 audit(1608474045.060:34): pid=908 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15752 res=0 errno=0 [ 1008.549878][ T905] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1008.607377][ T905] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x5}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1008.716881][ T35] audit: type=1804 audit(1608474045.290:35): pid=915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/783/file0/bus" dev="sda1" ino=15752 res=1 errno=0 14:20:45 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x80, 0x0, 0x7b, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000000)={0x0, {0x3, 0xffff}}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r1, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x7f, 0x0) r2 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x8, &(0x7f00000000c0)=""/8, 0x40f00, 0x10, [], 0x0, 0x6, r2, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0xd, 0x8000, 0x200}, 0x10, 0xffffffffffffffff, r1}, 0x78) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000031c0)=[{&(0x7f0000002940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002d00)=[{&(0x7f00000029c0)='p}', 0x2}, {0x0}, {&(0x7f0000002a40)="8ee9ee6f57997703ddd1e33a1675bc11a523e4a2cb6e87faca2f4e095fc36892901fdec23fc897bc5e17faa3f9d61a6c27b6a32f6969abd9cafc87ef82dd6e2423050b3b190a5305342bbc362f598b5d2da16ce2dc6a70361effaa393d3014b6587a52bd4ba7965c31cbe049dff2ad2fe7ce168920ce70449b5b524f52f4955d2c132a199661aedc", 0x88}, {&(0x7f0000002cc0)}], 0x4, 0x0, 0x0, 0x4004085}, {&(0x7f0000002d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000002e00)}], 0x1, &(0x7f0000003100)=ANY=[@ANYBLOB="24000000000000fb0000000001c7cc00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000002000000008000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4008030}], 0x2, 0x55) setgid(0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f00000014c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="040829bd7000fedbdf250cca2c1f94744f76634561405017abee000000"], 0x14}}, 0x40001) syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:20:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7430ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x40000) 14:20:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x6}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1009.081364][ T932] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1009.137907][ T932] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x400300) [ 1009.181118][ T936] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1009.215832][ T932] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x7}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca75b0ef410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 1009.458768][ T953] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xf0ffff) [ 1009.506105][ T953] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x8}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1009.580302][ T953] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca74803f410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:46 executing program 3: setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x0, 0x4e21, 0x8dd, 0xa, 0x0, 0x0, 0x3a}, {0x6, 0x0, 0x3ff, 0x300000000000, 0x6, 0x3, 0xff, 0xf1}, {0x8, 0x2, 0x8, 0x5}, 0x1f, 0x6e6bb5, 0x2, 0x1, 0x3, 0x2}, {{@in6=@private0, 0x4d6, 0x3c}, 0xa, @in=@multicast2, 0x0, 0x4, 0x2, 0x3f, 0x1, 0x1f, 0x5}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x9bf}}, 0x18) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) dup(r1) 14:20:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x9}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1010.471396][ T35] audit: type=1800 audit(1608474047.060:36): pid=977 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15752 res=0 errno=0 [ 1010.610362][ T35] audit: type=1804 audit(1608474047.190:37): pid=977 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/784/file0/bus" dev="sda1" ino=15752 res=1 errno=0 14:20:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xf8}}, 0x0) 14:20:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x1000000) 14:20:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca74808f410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0xe}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004fe00)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "70fd0cdbccc937"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000050e00)={{0x0, 0x2, 0x1, 0x1ff, 0x8f1, 0x1, 0x8, 0x3ff, 0x60e9fa93, 0x8, 0x7, 0x100000001, 0x224, 0xfffffffffffffffe, 0x4}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051e00)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "079358694ae501"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000052e00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {r6, r7}], 0x20, "67bf0a5e35797c"}) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8010, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca74810f410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0xf}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x2000000) 14:20:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f0014f9f4070009040002000710080001", 0x17) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000200)="fde37f84aa2314090000000000000094ba94d0fae162af49efcacf49e5072bfa53fdc850ac53959f5b8d975c7feca07b9a87ea1256a0f598a3ae31e09d809c6a0800ff1461f67c9bfd1373a77212252d0dbf3ceff9e2011f3757a1bc5f6aeae35ea735b9754bf58a0410000000000200a759623c7de83ce966749f0e12c984a26d7f1a5d36947667260cb70f39e7faf316000000005987d6488f25c3987ae95cd643a46cf93c9ff9b35ea1b926ac9f8d9a119ee7251c098ad5af42853703372650ec007c612c6ec6c83c5eb32b", 0x3a}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x96a44f1) r7 = inotify_init() splice(r4, 0x0, r7, 0x0, 0x401, 0x5) 14:20:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r1, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1011.384878][ T1016] __nla_validate_parse: 30 callbacks suppressed [ 1011.384900][ T1016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1011.519074][ T1020] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1011.536308][ T1016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1011.586211][ T1022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x60}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca74814f410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x3000000) 14:20:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, &(0x7f0000000000)={0x4, 0x1, 0x7f8000, 0x20, 0x4, 0x3f, 0x3f, 0x0, 0x81, 0x7f, 0x1, "f8d67677c93ca589acbe97c63a6b28c31696e99aaf224f0ff493bdf3a421a27b"}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3f000009, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 14:20:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200000, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1011.863938][ T1036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1011.932617][ T1045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1011.974359][ T1036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca74825f410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 1012.018318][ T1056] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000400)={0x0, 0x5575, 0x2, 0x800000, 0xfffffffc}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3e3b, &(0x7f0000000340)={0x0, 0x1d86, 0x4, 0x3, 0x15}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00008fa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r0, 0x80, &(0x7f0000000140)=@l2={0x1f, 0x7, @any, 0x8}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_enter(0xffffffffffffffff, 0x185, 0xd068, 0x1, &(0x7f00000003c0)={[0x7]}, 0x8) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x10000, 0x102c0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1012.115062][ T1057] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1012.206945][ T1064] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 14:20:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000002) socket$packet(0x11, 0xa, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f000099e000)={0x2, 0x4ea3, @rand_addr=0x64010101}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000200)={0x3, 0x0, [{0x0, 0x3, 0x0, 0x0, @sint={0x3, 0x6}}, {0x5, 0x3, 0x0, 0x0, @adapter={0x0, 0x4, 0x4, 0x1, 0xd5}}, {0x0, 0x2, 0x0, 0x0, @irqchip={0x8}}]}) 14:20:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x4000000) 14:20:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca74830f410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = dup(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1, 0x20000000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xffffffff, &(0x7f00000000c0)={[0x940]}, 0x8) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0) [ 1012.777171][ T1077] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'gretap0\x00'}) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1012.860584][ T1081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x2}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x5000000) 14:20:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000400)={0x0, 0x5575, 0x2, 0x800000, 0xfffffffc}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3e3b, &(0x7f0000000340)={0x0, 0x1d86, 0x4, 0x3, 0x15}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00008fa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r0, 0x80, &(0x7f0000000140)=@l2={0x1f, 0x7, @any, 0x8}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_enter(0xffffffffffffffff, 0x185, 0xd068, 0x1, &(0x7f00000003c0)={[0x7]}, 0x8) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x10000, 0x102c0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca74833f410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x3}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000400)={0x0, 0x5575, 0x2, 0x800000, 0xfffffffc}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3e3b, &(0x7f0000000340)={0x0, 0x1d86, 0x4, 0x3, 0x15}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00008fa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r0, 0x80, &(0x7f0000000140)=@l2={0x1f, 0x7, @any, 0x8}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_enter(0xffffffffffffffff, 0x185, 0xd068, 0x1, &(0x7f00000003c0)={[0x7]}, 0x8) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x10000, 0x102c0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000010001fffd6c790570000000000000000", @ANYRES32=0x0, @ANYBLOB="0312000000000000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x0) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c040000f40300042abd7000fbdbdf2504000000020000003300000020000000ee88000000100000000000000180000003000000050000000700000011350000010000000600000005000000400000000800000007000000e8060000ffffffff06000000ff00000008000000550000002500000072070000000000000000000000000080ffff00000000000006000000020000007f0000000000010076101ca20100000001000080060000002000000001040000000000007f0000003d07000009000000050000004c000000ad000000c6820000ff070000bddc000000080000fbffffffb10700000000008001000000810000000200000001800000810000000104000000010000000200000400000000020000e08d1c000300000035ed00000200000009000000fcffffff090000009ce4000002000000eb0f000000000100060000004000000001000100000000000500000000080000080000000800000040000000008000000100008024000000df00000002000000010000007f000000e10000000800000008000000070000000700000005000000ff0f000001000000040000008c00000007000000020000000900000009000000ffff000000000000feffffff0400000005000000ff0f0000010000005d0800008100000001000000b4010000800300000800000001000100f9ffffff0900000000000000bbe60000050000002a3c000002000000ecffffff000200001f00000006000000ff7f0000090000003f0000000600000003000000fcffffff07000000090000000700000004000000ffffffff0900000009000000020000000900000000000000ee000000090000000000000004000000ff0000000500000002000000ff0f000017ee00000800000000000000050000000900000001000080000200000900000001040000f6d50000ffffffff0400000004000000b0d7000009000000010000009609000000000100ffffffff14000000ffffff7f00010000090000006d100000ff030000030000000500000000800000040000000400000001800000060000000000000001040000060000008100000008000000800000000000000009000000090000000000000000000000b10500000800000006000000018000000000008004000000e1ffffff000200000600000005000000db280000ffffff7f0800000000000000050000000300000007000000bf00000003000000000000000004000000010000050700003c0e000005000000060000000700000081000000060000000700000081000000050000000100000000000000567d0000ff010000fbffffffff0000000000000009000000a9000000050000000100000008000000030000000800000006000000060000000800000067020000080000000104000009000000080000000900000004000000050000000000082000080000ffffff7f050000001c0000002b7d2c67407d3a247d2b272e212e003a000027286127282d29000000"], 0x43c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000880)='logon\x00', &(0x7f00000008c0)={'fscrypt:', @auto=[0x64, 0x1, 0x32, 0x37, 0x34, 0x33, 0x32, 0x55, 0x59, 0x33, 0x33, 0x38, 0x65, 0x35, 0xa, 0x35]}, &(0x7f0000000900)={0x0, "fd966b78c9b3e2f4dfdc4ef0426adf8e3771c792bc2a6a87b742b5e2dd6a7c6caba266b925778bea17cc8e2da8992149035ce653c504ad3994b3b6b7d0ac6e1d", 0x16}, 0x48, 0xffffffffffffffff) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000780)="41cdf839ba7001fd9f3a6e779912e4e50135af805725e913b134a429d93d21b52ba4db0ded55c6d2a9fada9fe6e376e763762e234bf5dfbc231d52f6538587cd9b677e843399b268e318770d98034a29f70c547297ab2bee8fa98ecf4fd07d0e1b06f8087df3b493214ad6d39d8b8853005cfa993aa00974eacfc05e622df087302cf545acadda961cc91115c3f705586fbbb56acf4c75e0e1b5dbae7720d31eb7e29e9692f713461754e581ce4f4792068a3ad5fdf59ef22ec361ee0884b905899d1bcaee3827d9a0", 0xc9, r6) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) io_setup(0x18fd, &(0x7f0000000080)) 14:20:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x6000000) 14:20:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca74844f410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) sendto$inet6(r1, &(0x7f0000000040)="a03c2b083837e711f119c5f3e698348a52babba45bd46fa14d", 0x19, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @mcast1}, 0x1c) [ 1013.546586][ T1134] validate_nla: 21 callbacks suppressed [ 1013.546608][ T1134] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1013.604431][ T1134] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1013.695122][ T1134] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:50 executing program 3: chmod(&(0x7f0000000040)='./file0\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x45], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:20:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x4}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x7000000) 14:20:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit(0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x4c}}, 0x0) 14:20:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca74847f410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:50 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000000000000faff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001a00e0000001"], 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="0000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) close(0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 14:20:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00004a6000/0x3000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1014.016762][ T1160] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1014.104539][ T1160] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1014.131924][ T1160] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1014.157149][ T1169] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x5}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7485bf410000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x8000000) [ 1014.400523][ T1188] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1014.415118][ T1188] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1014.475340][ T1188] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x6}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r3, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x800000000000069) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef402000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x9000000) 14:20:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x6, 0xffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000304000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="03020000000000002c00128009000100766c616e000000001c00028006000100000000000c0002000e0000000a0000000400038008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x5c}}, 0x0) 14:20:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x8}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x20000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00012ebd7000fddbdf256f0000000500d600030000000a00060008021100000100000a0006000802110000010000"], 0x34}}, 0x4000000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x2000, @loopback}, 0x1c) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x26000001}, 0x20008004) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) ftruncate(r3, 0x600004) socket$bt_cmtp(0x1f, 0x3, 0x5) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000480)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) setpgid(0x0, r4) sendfile(r0, r3, 0x0, 0x80001d00c0d0) socket$inet6(0xa, 0x0, 0x0) 14:20:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef403000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000340)={"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"}) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f0000000080)=0x5, 0x4) r3 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r6, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000340)={0x3ff, 0x3ff, 0x8c, 0x6, 0x11, "7c237de36a80c2e6"}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0xa}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xecd}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x332}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6d3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r6, 0x800455d1, &(0x7f0000000080)) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef404000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xa000000) 14:20:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x9}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x450c, 0xfffffffc, 0x3, 0x0, 0x4c) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r3, 0xba669000) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r4, 0x0, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, 0xee01, r5) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000340)={0x3ff, 0x3ff, 0x8c, 0x6, 0x11, "7c237de36a80c2e6"}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0xa}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xecd}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x332}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6d3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r6, 0x800455d1, &(0x7f0000000080)) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1017.118843][ T1288] __nla_validate_parse: 29 callbacks suppressed [ 1017.118864][ T1288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000080)=0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1017.200836][ T1290] batman_adv: batadv0: Adding interface: gretap0 [ 1017.207725][ T1290] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.259778][ T1290] batman_adv: batadv0: Interface activated: gretap0 [ 1017.283288][ T1314] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1017.349781][ T1291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef405000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0xf8}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0x100010, r2, 0x82000000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x16a40, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000000c0)={0x2, 0x0, 0x7}) fcntl$dupfd(r3, 0x0, r3) 14:20:54 executing program 3: r0 = open(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="3c0000000f1500032abd7000fedbdf25080000000200000008000100010000001127fd7614625f6d756c74696361737436402100000000080045006345c0822942de03db4353"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0xc004005) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$RTC_AIE_ON(r0, 0x7001) 14:20:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0xe}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xb000000) 14:20:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0xf}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1017.678720][ T1333] batman_adv: batadv0: Adding interface: erspan0 [ 1017.712379][ T1333] batman_adv: batadv0: The MTU of interface erspan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 14:20:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16094}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='/proc/0\xef9\x97C\b:K\xe0\x02\xe8/c/\x0f'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x69) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x0, 0xea60}}) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1017.781037][ T1333] batman_adv: batadv0: Interface activated: erspan0 [ 1017.861829][ T1347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1017.933370][ T1349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1017.957454][ T1349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef406000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 1018.002813][ T1349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xc000000) 14:20:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x60}, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x480480, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x182110, r4, 0xba669000) socket(0x18, 0x800, 0x1) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1018.215040][ T1381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1018.262946][ T1381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x2}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef407000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 1018.304087][ T1381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16094}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='/proc/0\xef9\x97C\b:K\xe0\x02\xe8/c/\x0f'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x69) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x0, 0xea60}}) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef405000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xe000000) 14:20:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x3}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef408000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x7}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1018.798249][ T1419] validate_nla: 18 callbacks suppressed [ 1018.798273][ T1419] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1018.867128][ T1436] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1018.885087][ T1436] batman_adv: batadv0: Interface deactivated: team0 [ 1018.902433][ T1436] batman_adv: batadv0: Removing interface: team0 14:20:55 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8042}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = open(&(0x7f00000005c0)='./file0\x00', 0x220c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {r5, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) setxattr$security_evm(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x4, 0x2) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000300)={0x0, 0x0, @name="4536fe763664828a6d9d722381333a016ad4caa87e69b35bd50003c300"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'bond0\x00', {0x1}, 0x9}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) renameat(r2, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00') r6 = dup(r2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000140), 0x4) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000002c0)) sendfile(r2, r2, &(0x7f0000000080), 0xa198) [ 1018.931293][ T1436] team0: Cannot enslave team device to itself 14:20:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x6a55, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000001c0), &(0x7f0000000240)=0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) clone3(&(0x7f0000000440)={0xe019100, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000340)=0x0, {0xe}, &(0x7f0000000380)=""/36, 0x24, &(0x7f00000003c0)=""/21, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) write$cgroup_pid(r4, &(0x7f00000004c0)=r6, 0x12) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000540)={0x0, 0xb4f, 0x1f, [], &(0x7f0000000500)=0x75}) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400, 0x0) mmap(&(0x7f000060d000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x13f22000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1018.981793][ T1439] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1019.040021][ T1439] batman_adv: batadv0: Adding interface: erspan0 [ 1019.098526][ T1439] batman_adv: batadv0: The MTU of interface erspan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.137673][ T1439] batman_adv: batadv0: Interface activated: erspan0 [ 1019.200457][ T1438] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1019.250006][ T1419] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xf000000) 14:20:56 executing program 3: socket$nl_crypto(0x10, 0x3, 0x15) splice(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0xffffffffffffffff, &(0x7f0000000140)=0x9, 0x2, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8915, &(0x7f0000000000)={'syz_tun\x00', @ifru_addrs=@can}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8916, &(0x7f0000000000)={'syz_tun\x00', @ifru_addrs=@can}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f00000000c0)) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f0000000080)={0x0, 0x634c, 0x2, [], &(0x7f0000000040)=0xb1}) 14:20:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef409000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x3b}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:56 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, 0x0, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x2, 0x2004, @fd=r0, 0x800, &(0x7f0000000340)="3d0724a680f98108194aa3900df2ddb99b75af631025b86de90abf17d7e17f701e98b566ba1ea50969c0b12a71ae73efb109b3d3edd840684794338c584eaa034e73b186691a3b2f6cc97b3a21fa3666a4bc24db9f453edc", 0x58, 0x3, 0x1, {0x0, r5}}, 0x80) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r6, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1019.615560][ T1466] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1019.636555][ T1473] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1019.694347][ T1466] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x10000000) 14:20:56 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000000)={0xa, 0x2, 0x2, 0x3, '\x00', 0xfffffff9}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000040)={0x4, 0x1, 0x7ff, 0xad, '\x00', 0x4}) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000080)) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f00000000c0)=0x1) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x20000, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x1, 0x5}, 0xf) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10212000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x45a000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0xd1, "f8a122921c39879689cc5e8d78f9bef5ca39524cd7d0a1471a24c4ccd95f3b65e55d5b8bf81542f0da45eabfaba6e4499fdc17bdec5dede8e2652f06ff583d72fc8854ca23fbf9a5104d67eef63671097c50f5850c5bb3d854e83f340cbccf562b811ceddfaabcd0edafa2b1c094ffd353b43d1426d0d8f676fab4af6e7f5bfc2dda32bd37896ec2d952d3981079cdd67d1a64e81d83a3a06031d31ee2e370d3f5610325dc59452379c0270a5533d90cd3d8948d960eace10cb8039746eb44fbde3bfd2fa64eb78495dbf18563aad46b56"}, &(0x7f0000000400)=0xd9) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r2, 0x7ff, 0x239b}, &(0x7f0000000480)=0xc) write$P9_RSTAT(r0, &(0x7f00000004c0)={0x45, 0x7d, 0x2, {0x0, 0x3e, 0x7, 0x20, {0x8, 0x4, 0x2}, 0x0, 0x72, 0x10000, 0x8, 0x2, '$-', 0x2, '\xc9%', 0x1, '\x00', 0x6, '+(%]!-'}}, 0x45) r4 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x7, 0x40000) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8001) accept$inet(r0, 0x0, &(0x7f0000000600)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vcs\x00', 0x408280, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000008c0)={&(0x7f0000000640)="259248960123f00f2b5b48650fe66d8942a43bb3d7cd4237d3300ba747d2c033dd0c11681a46e562e627725a0ff39fc971c3e1b8f10a3e8cb7488f242f09b3f5825189c70842d2752dd4c001a09926d9698ff1f5f91e75dbe847ee4869e050501aef3eea2a7fecde180333c11d96fb2168dd8a3418b8ceb1a36d20d91d60a7912b7236bd3281822272462a37e3b9182d8c08ebba627a5e047889ee46ae121e827806a7bbfeac0cb9f461d674832b8c1f7aba9c48ab96d04ab2ef363f4888c5ee5b88aadea0cde26f2d1bf39e2342b1bb14334ba42e31ceb5a04fcbbec3d2432eb3eb", &(0x7f0000000740)=""/45, &(0x7f0000000780)="9b59f3d454d6f6e0a9ad3add8589c0c28b03991044e0416c2aba68b03f3eb5fdc9faabdbfc716a128809dbe77319e0dc6c18432bca3eed6de28017383c2c976532ccd51cf5aec0b7694e168eb810cbf2be9900c7434f27ab8640190c3a0df71d3674187dd4d1bb73898225dc7c4556f94505ca36fc54499559c58b1ecf2cdcad64570ac79a3d7861c9e7c5bc048e680962bca493f2f0b5de05d9b080961cddaa0ae9909999456afcc4047e0a96c7", &(0x7f0000000840)="1e2836efe6515e18d004c9f560aa0452300d8321a097822d4c72fd1b0670a119090c240bb853be0f52ef1b8a34694539", 0x10001, r5}, 0x38) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000900)={r3, 0x5, 0x8, 0x9}, &(0x7f0000000940)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000980)={0x0, 0x8003, 0x4, 0x2, r6}, &(0x7f00000009c0)=0x10) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 14:20:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef40a000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x54}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/143) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x14) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x40840) mmap(&(0x7f0000ee9000/0x4000)=nil, 0x4000, 0x0, 0x10010, r6, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1020.309601][T10706] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1020.512786][ T1492] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1020.527842][ T1497] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 14:20:57 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8042}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = open(&(0x7f00000005c0)='./file0\x00', 0x220c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {r5, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) setxattr$security_evm(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x4, 0x2) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000300)={0x0, 0x0, @name="4536fe763664828a6d9d722381333a016ad4caa87e69b35bd50003c300"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'bond0\x00', {0x1}, 0x9}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) renameat(r2, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00') r6 = dup(r2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000140), 0x4) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000002c0)) sendfile(r2, r2, &(0x7f0000000080), 0xa198) 14:20:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x11000000) 14:20:57 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x700) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FICLONE(r0, 0x40049409, r5) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r6, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef40b000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x69}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1020.869906][T10706] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1020.900300][ T1530] batman_adv: batadv0: Adding interface: syz_tun [ 1020.909537][T10706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.977640][ T1530] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.019841][T10706] usb 4-1: Product: syz [ 1021.024058][T10706] usb 4-1: Manufacturer: syz [ 1021.028673][T10706] usb 4-1: SerialNumber: syz [ 1021.032573][ T1530] batman_adv: batadv0: Interface activated: syz_tun 14:20:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x3f000000) 14:20:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x8, 0x8}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x85, &(0x7f00000002c0)={0x0, 0x373d, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x80001, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) ioctl$SCSI_IOCTL_SYNC(r6, 0x4) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) semget$private(0x0, 0x4, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x67, 0x4, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1021.161822][T10706] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1021.869484][T10706] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1022.078690][ T4922] usb 4-1: USB disconnect, device number 6 14:20:59 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8042}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = open(&(0x7f00000005c0)='./file0\x00', 0x220c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {r5, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) setxattr$security_evm(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x4, 0x2) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000300)={0x0, 0x0, @name="4536fe763664828a6d9d722381333a016ad4caa87e69b35bd50003c300"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'bond0\x00', {0x1}, 0x9}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) renameat(r2, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00') r6 = dup(r2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000140), 0x4) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000002c0)) sendfile(r2, r2, &(0x7f0000000080), 0xa198) 14:20:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef40c000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:59 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x401, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000140)={0x0, 0x1, r5, 0x7f}) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r6, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x60000000) 14:20:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x8, 0x3b}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:20:59 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8042}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = open(&(0x7f00000005c0)='./file0\x00', 0x220c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {r5, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) setxattr$security_evm(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x4, 0x2) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000300)={0x0, 0x0, @name="4536fe763664828a6d9d722381333a016ad4caa87e69b35bd50003c300"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'bond0\x00', {0x1}, 0x9}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) renameat(r2, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00') r6 = dup(r2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000140), 0x4) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000002c0)) sendfile(r2, r2, &(0x7f0000000080), 0xa198) [ 1022.704103][ T1585] batman_adv: batadv0: Adding interface: ip6gretap0 [ 1022.732400][ T1585] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 14:20:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x56}, &(0x7f000074c000/0x4000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='rxrpc_rx_lose\x00', r4}, 0x10) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7, 0x610e00) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1022.818624][ T1585] batman_adv: batadv0: Interface activated: ip6gretap0 [ 1022.959212][T10706] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1022.966215][T10706] ath9k_htc: Failed to initialize the device [ 1022.972619][ T1589] __nla_validate_parse: 22 callbacks suppressed [ 1022.972638][ T1589] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1023.059623][ T4922] usb 4-1: ath9k_htc: USB layer deinitialized 14:20:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef40d000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:20:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x84) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:20:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x8, 0x69}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1023.254975][ T1595] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1023.283163][ T1595] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1023.343843][ T1630] batman_adv: batadv0: Adding interface: bridge0 [ 1023.355547][ T1595] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1023.367700][ T1630] batman_adv: batadv0: The MTU of interface bridge0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.434497][ T1630] batman_adv: batadv0: Interface activated: bridge0 14:21:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x8, 0x2, 0x3b}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:21:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef40e000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:21:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef40c000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:21:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x65580000) 14:21:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:21:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x8, 0x2, 0x69}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:21:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef40f000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:21:00 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8042}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = open(&(0x7f00000005c0)='./file0\x00', 0x220c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {r5, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) setxattr$security_evm(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x4, 0x2) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000300)={0x0, 0x0, @name="4536fe763664828a6d9d722381333a016ad4caa87e69b35bd50003c300"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'bond0\x00', {0x1}, 0x9}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) renameat(r2, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00') r6 = dup(r2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000140), 0x4) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000002c0)) sendfile(r2, r2, &(0x7f0000000080), 0xa198) [ 1024.284843][ T1663] validate_nla: 16 callbacks suppressed [ 1024.284865][ T1663] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1024.339567][ T1668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1024.423260][ T1671] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1024.442528][ T1671] team0: Cannot enslave team device to itself 14:21:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x87, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r3, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1024.466206][ T1673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1024.475658][ T1663] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1024.500757][ T1663] batman_adv: batadv0: Adding interface: bond0 [ 1024.542708][ T1663] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 14:21:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1024.656073][ T1663] batman_adv: batadv0: Interface activated: bond0 [ 1024.703655][ T1676] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1024.761539][ T1676] batman_adv: batadv0: Adding interface: ip6gretap0 [ 1024.792616][ T1676] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 14:21:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x7b18, 0x1, 0x0, 0xfffffffd, 0x0, r2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r7, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1024.905422][ T1676] batman_adv: batadv0: Interface activated: ip6gretap0 [ 1025.003749][ T1663] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1025.062983][ T1674] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1025.092091][ T1673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:21:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef40c000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:21:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef411000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 1025.238116][ T1720] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1025.277568][ T1720] team0: Cannot enslave team device to itself 14:21:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x81000000) 14:21:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x2}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1025.322743][ T1724] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 14:21:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0)={0x0, 0xe312, 0x10}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00004df000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x101800, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000180)={0x3, 0x100, 0x9, 0x0, 0x4, 0x8001}) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x5]}, 0x0, 0x8) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mISDNtimer\x00', 0x6e000, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a2b000/0x1000)=nil, 0x1000, 0x0, 0x28011, r5, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000240)='veth1_to_hsr\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1025.366187][ T1725] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1025.415644][ T1725] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1025.454485][ T1725] batman_adv: batadv0: Adding interface: dummy0 14:21:02 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc6, 0xe7, 0xd5, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x1, 0x24}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="00035023fc373fc2afd9382a9f283ab4e005d11926ff6c5582558e6bd91d6ade8b39957862ec1264afdd70ff51995b70566ddb50e003eaf14e31d416b38691ba27a1e792a18bd4a994f39a0dbfa24c3aec4e4ecc864c693c3cedf120c8d016bfbaed09c6fee86b3b934c40787763"]}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0xb0b6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1025.482096][ T1725] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.617699][ T1725] batman_adv: batadv0: Interface activated: dummy0 [ 1025.653879][ T1729] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1025.842243][ T1735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:21:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef412000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 1025.939475][T24825] usb 4-1: new high-speed USB device number 7 using dummy_hcd 14:21:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x27, 0x0, 0x4, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x101}, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x3, 0x201}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x3, 0x408000) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000340)={{0x0, 0x0, 0x80}}) r3 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r6, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1026.179513][T24825] usb 4-1: Using ep0 maxpacket: 8 14:21:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef411000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:21:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x88a8ffff) 14:21:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x3}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:21:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0)={0x0, 0x80d3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000140)=""/178, 0xb2, 0x8, 0x7f, 0x400, 0x7, 0x7}}, 0x120) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x210001, 0xc) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000480)={0x2, @pix_mp={0x20, 0x1, 0x3631564e, 0x6, 0x4, [{0x5, 0x9}, {0x860, 0x6}, {0x7ff, 0x4000}, {0x607, 0xfffffff7}, {0x5, 0x8001}, {0x20200000, 0x6}, {0x2, 0x7ff}, {0x1, 0x8000}], 0x6c, 0x0, 0x3, 0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:21:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef414000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 1026.404487][T24825] usb 4-1: string descriptor 0 read error: -71 [ 1026.426306][ T1775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1026.429515][T24825] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 1026.497939][T24825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.511845][ T1780] batman_adv: batadv0: Interface deactivated: team0 [ 1026.520046][ T1780] batman_adv: batadv0: Removing interface: team0 [ 1026.557565][ T1780] team0: Cannot enslave team device to itself [ 1026.593860][ T1792] batman_adv: batadv0: Adding interface: dummy0 [ 1026.605866][T24825] usb 4-1: config 0 descriptor?? [ 1026.612769][ T1792] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.641807][T24825] usb 4-1: can't set config #0, error -71 [ 1026.652850][ T1792] batman_adv: batadv0: Interface activated: dummy0 [ 1026.662946][T24825] usb 4-1: USB disconnect, device number 7 14:21:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x7}, {0x0, 0xeae}]}, 0x14, 0x3) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:21:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x4}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:21:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x9effffff) 14:21:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef425000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 1026.964474][ T1815] batman_adv: batadv0: Adding interface: veth0_to_team [ 1026.979548][ T1815] batman_adv: batadv0: The MTU of interface veth0_to_team is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.018331][ T1815] batman_adv: batadv0: Interface activated: veth0_to_team [ 1027.279361][T24825] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1027.529185][T24825] usb 4-1: Using ep0 maxpacket: 8 14:21:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x88a8ffff) [ 1027.730125][T24825] usb 4-1: string descriptor 0 read error: -71 [ 1027.736737][T24825] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 1027.758400][T24825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 14:21:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef42f000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:21:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000140)={0x1, {&(0x7f0000000080)=""/13, 0xd, &(0x7f0000000340)=""/4096, 0x1, 0x4}}, 0x48) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r5, 0x0, 0x0) sendfile(r5, r1, &(0x7f00000000c0)=0x9, 0x9) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:21:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x5}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:21:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001040000090400000000000006007c6173c6c98b8b581d7e249a42", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000012c0)={{}, 0x0, 0x18, @inherit={0x68, &(0x7f0000000280)={0x0, 0x4, 0x9, 0x8e, {0x20, 0x4, 0x9, 0x0, 0x1}, [0x4, 0x9, 0x6, 0x3]}}, @name="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"}) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="53cb79cc9169e70c00000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r9, @ANYBLOB="1400020000000000000000200000ffff00000000"], 0x2c}}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001400b59500200000000000000a0b0000", @ANYRES32=r12, @ANYBLOB="080008001f536bae1400020000000000000000000000ffff00000000"], 0x34}}, 0x0) 14:21:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xc0000000) [ 1027.781474][T24825] usb 4-1: config 0 descriptor?? [ 1027.822584][T24825] usb 4-1: can't set config #0, error -71 [ 1027.853488][T24825] usb 4-1: USB disconnect, device number 8 [ 1027.925848][ T1849] batman_adv: batadv0: Adding interface: veth1_to_hsr [ 1027.941436][ T1849] batman_adv: batadv0: The MTU of interface veth1_to_hsr is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.992096][ T1849] batman_adv: batadv0: Interface activated: veth1_to_hsr [ 1028.059909][ T1850] __nla_validate_parse: 12 callbacks suppressed [ 1028.059932][ T1850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1028.082530][ T1870] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:21:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x6}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1028.118163][ T1860] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1028.155721][ T1874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:21:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x700) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) 14:21:04 executing program 4: unshare(0x48000000) ioctl$CHAR_RAW_PG(0xffffffffffffffff, 0x1269, &(0x7f0000000000)={0x0, 0x476, 0x0, 0x0}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 14:21:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef444000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:21:04 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000000004079000600000002000000000000000009040000010300b100092100000001222200090581030000030000000000e942a1f2fb7844cc62e0bc9ba39d69962030b26fc046874712e55f5df983022f0daf284cd84426d708c852e9d1976a7714d124c075598a36c237f05cd2ad770fe63a1c051717533701da1fe67f5c562e4b57676a3c96b1bffb80"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x6, "4bddd6066320d8d8e957df8327000049e6ab366cae65713c8ed69d99c5e239ba"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000080)={0xd1, 0x7fff, 0xaae7, 0x68ab626e, 0x6}) 14:21:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xc00e0000) [ 1028.404592][ T1895] batman_adv: batadv0: Adding interface: netdevsim1 [ 1028.431268][ T1896] IPVS: ftp: loaded support on port[0] = 21 14:21:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x7}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) [ 1028.454446][ T1895] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 14:21:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000004a5a5c02cc5daec27003cec2000000000021964c80c3ad17a6d578b32ebbc0a30f511786d7fda4c75080da00000000"], 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x24000810) r1 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, 0x0, 0x0, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="c000000002000000000000000000000002000008a00002000c00028005000100010000001400018008000100e000000208000200ac1414aa2c00018014000300fc02000000000000000000000000000114000400fe80000000000000000000000000003f0c000280050001002b000000060003400000000006000340000400000c00028005000100840000001400018008000100ac1414aa08000200ac14141f1400018008000100ac1e0101080002000a0101000900010073797a3100000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4004000}, 0x10040891) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x1, 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000a86000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0xba669000) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvram\x00', 0x80000, 0x0) read$proc_mixer(r5, &(0x7f0000000380)=""/183, 0xb7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x5) [ 1028.558735][ T1895] batman_adv: batadv0: Interface activated: netdevsim1 [ 1028.649265][ T1901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1028.690263][T24825] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1028.735015][ T1907] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1028.793535][ T1907] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1028.803949][ T1908] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 14:21:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef447000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) [ 1028.896947][ T1919] ================================================================== [ 1028.905433][ T1919] BUG: KASAN: use-after-free in __mutex_lock+0x102f/0x1110 [ 1028.912676][ T1919] Read of size 8 at addr ffff888073cfc3e0 by task syz-executor.0/1919 [ 1028.920868][ T1919] [ 1028.923199][ T1919] CPU: 0 PID: 1919 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 1028.931538][ T1919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1028.941627][ T1919] Call Trace: [ 1028.945410][ T1919] dump_stack+0x107/0x163 [ 1028.949772][ T1919] ? __mutex_lock+0x102f/0x1110 [ 1028.956045][ T1919] ? __mutex_lock+0x102f/0x1110 [ 1028.962033][ T1919] print_address_description.constprop.0.cold+0xae/0x4c8 [ 1028.969089][ T1919] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 1028.974486][ T1919] ? vprintk_func+0x95/0x1e0 [ 1028.980410][ T1919] ? __mutex_lock+0x102f/0x1110 [ 1028.985769][ T1919] ? __mutex_lock+0x102f/0x1110 [ 1028.991337][ T1919] kasan_report.cold+0x1f/0x37 [ 1028.996135][ T1919] ? __mutex_lock+0x102f/0x1110 [ 1029.001008][ T1919] __mutex_lock+0x102f/0x1110 [ 1029.006583][ T1919] ? io_ring_ctx_wait_and_kill+0x21/0x450 [ 1029.006999][ T1896] IPVS: ftp: loaded support on port[0] = 21 [ 1029.012331][ T1919] ? mutex_lock_io_nested+0xf60/0xf60 [ 1029.012390][ T1919] ? fsnotify+0xa36/0x1090 [ 1029.029745][ T1919] ? lockdep_hardirqs_on+0x79/0x100 [ 1029.034973][ T1919] ? debug_object_active_state+0x260/0x350 [ 1029.040814][ T1919] ? fsnotify_first_mark+0x230/0x230 [ 1029.046125][ T1919] ? debug_object_free+0x2e0/0x2e0 [ 1029.051578][ T1919] ? locks_remove_file+0x32a/0x590 [ 1029.057459][ T1919] ? fcntl_setlk+0xeb0/0xeb0 [ 1029.062844][ T1919] io_ring_ctx_wait_and_kill+0x21/0x450 [ 1029.069454][ T1919] io_uring_release+0x3e/0x50 [ 1029.074808][ T1919] __fput+0x283/0x920 [ 1029.078816][ T1919] ? io_ring_ctx_wait_and_kill+0x450/0x450 [ 1029.084656][ T1919] task_work_run+0xdd/0x190 [ 1029.089190][ T1919] do_exit+0xb89/0x2a00 [ 1029.093506][ T1919] ? find_held_lock+0x2d/0x110 [ 1029.098295][ T1919] ? mm_update_next_owner+0x7a0/0x7a0 [ 1029.103702][ T1919] ? get_signal+0x2f4/0x2160 [ 1029.109121][ T1919] ? lock_downgrade+0x6d0/0x6d0 [ 1029.115018][ T1919] do_group_exit+0x125/0x310 [ 1029.120887][ T1919] get_signal+0x3e9/0x2160 [ 1029.125356][ T1919] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 1029.132523][ T1919] ? io_link_timeout_fn+0x480/0x480 [ 1029.138285][ T1919] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1029.144780][ T1919] ? put_timespec64+0xcb/0x120 [ 1029.149573][ T1919] ? ns_to_timespec64+0xc0/0xc0 [ 1029.155759][ T1919] exit_to_user_mode_prepare+0x124/0x200 [ 1029.161423][ T1919] syscall_exit_to_user_mode+0x19/0x50 [ 1029.166905][ T1919] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1029.172820][ T1919] RIP: 0033:0x45e149 [ 1029.177567][ T1919] Code: Unable to access opcode bytes at RIP 0x45e11f. [ 1029.184442][ T1919] RSP: 002b:00007fba3b827be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1029.194747][ T1919] RAX: fffffffffffffff4 RBX: 00000000200002c0 RCX: 000000000045e149 [ 1029.202746][ T1919] RDX: 0000000020ee8000 RSI: 00000000200002c0 RDI: 0000000000000087 [ 1029.212031][ T1919] RBP: 000000000119c080 R08: 0000000020000100 R09: 0000000020000100 [ 1029.220206][ T1919] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ee8000 [ 1029.229156][ T1919] R13: 0000000020ee7000 R14: 0000000020000100 R15: 0000000020000040 [ 1029.237521][ T1919] [ 1029.239991][ T1919] Allocated by task 1919: [ 1029.245021][ T1919] kasan_save_stack+0x1b/0x40 [ 1029.250307][ T1919] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1029.255990][ T1919] io_uring_setup+0x1d5b/0x38b0 [ 1029.261181][ T1919] do_syscall_64+0x2d/0x70 [ 1029.266308][ T1919] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1029.272227][ T1919] [ 1029.274835][ T1919] Freed by task 46: [ 1029.279643][ T1919] kasan_save_stack+0x1b/0x40 [ 1029.284885][ T1919] kasan_set_track+0x1c/0x30 [ 1029.290070][ T1919] kasan_set_free_info+0x1b/0x30 [ 1029.295736][ T1919] __kasan_slab_free+0x102/0x140 [ 1029.301051][ T1919] slab_free_freelist_hook+0x5d/0x150 [ 1029.306444][ T1919] kfree+0xdb/0x3c0 [ 1029.311278][ T1919] process_one_work+0x98d/0x1630 [ 1029.316619][ T1919] worker_thread+0x64c/0x1120 [ 1029.321890][ T1919] kthread+0x3b1/0x4a0 [ 1029.325980][ T1919] ret_from_fork+0x1f/0x30 [ 1029.331097][ T1919] [ 1029.333919][ T1919] Last potentially related work creation: [ 1029.340972][ T1919] kasan_save_stack+0x1b/0x40 [ 1029.346429][ T1919] kasan_record_aux_stack+0xc0/0xf0 [ 1029.352134][ T1919] insert_work+0x48/0x370 [ 1029.357488][ T1919] __queue_work+0x5c1/0xfb0 [ 1029.362681][ T1919] queue_work_on+0xc7/0xd0 [ 1029.367769][ T1919] io_uring_setup+0x1358/0x38b0 [ 1029.373032][ T1919] do_syscall_64+0x2d/0x70 [ 1029.378072][ T1919] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1029.385359][ T1919] [ 1029.387824][ T1919] The buggy address belongs to the object at ffff888073cfc000 [ 1029.387824][ T1919] which belongs to the cache kmalloc-2k of size 2048 [ 1029.403282][ T1919] The buggy address is located 992 bytes inside of [ 1029.403282][ T1919] 2048-byte region [ffff888073cfc000, ffff888073cfc800) [ 1029.416758][ T1919] The buggy address belongs to the page: [ 1029.423708][ T1919] page:00000000f7a8a80b refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73cf8 [ 1029.435112][ T1919] head:00000000f7a8a80b order:3 compound_mapcount:0 compound_pincount:0 [ 1029.444863][ T1919] flags: 0xfff00000010200(slab|head) [ 1029.450175][ T1919] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888010842000 [ 1029.460006][ T1919] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 1029.469965][ T1919] page dumped because: kasan: bad access detected [ 1029.477480][ T1919] [ 1029.479948][ T1919] Memory state around the buggy address: [ 1029.485583][ T1919] ffff888073cfc280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.495055][ T1919] ffff888073cfc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.503183][ T1919] >ffff888073cfc380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.511250][ T1919] ^ [ 1029.518981][ T1919] ffff888073cfc400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.527083][ T1919] ffff888073cfc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.535952][ T1919] ================================================================== 14:21:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x8}}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}, @void, @void}}}}]}, 0x68}}, 0x0) 14:21:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef444000000e3bd6efb440009000e000a0014000000008000001201", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000107c083265325bd22412bbfd04000000000000040040c19704e9", @ANYRES32, @ANYBLOB="00000000740effff850000006c0000004b2918000000000018290000", @ANYRES32=0x1, @ANYBLOB="000000000002000007930400040000001f8504000100000018160000", @ANYRES32, @ANYBLOB="00000000000000001f6009003f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xd, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x1ff}, 0x10}, 0x78) fcntl$dupfd(r1, 0x406, r2) 14:21:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000008000100753332"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d0055b7000000000000000767ae3604", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0xd2985dee) [ 1029.544365][ T1919] Disabling lock debugging due to kernel taint [ 1029.581966][ T1977] validate_nla: 20 callbacks suppressed [ 1029.581986][ T1977] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1029.609997][ T1977] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1029.619823][T24825] usb 4-1: no configurations [ 1029.621422][ T1977] batman_adv: batadv0: Adding interface: wlan0 [ 1029.625523][T24825] usb 4-1: can't read configurations, error -22 [ 1029.634936][ T1977] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.664174][ T1977] batman_adv: batadv0: Interface activated: wlan0 [ 1029.673945][ T1982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1029.674918][ T1919] Kernel panic - not syncing: panic_on_warn set ... [ 1029.689843][ T1919] CPU: 1 PID: 1919 Comm: syz-executor.0 Tainted: G B 5.10.0-syzkaller #0 [ 1029.699693][ T1919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.709763][ T1919] Call Trace: [ 1029.713626][ T1919] dump_stack+0x107/0x163 [ 1029.719024][ T1919] panic+0x343/0x77f [ 1029.723689][ T1919] ? __warn_printk+0xf3/0xf3 [ 1029.729675][ T1919] ? preempt_schedule_common+0x59/0xc0 [ 1029.735167][ T1919] ? __mutex_lock+0x102f/0x1110 [ 1029.735737][ T1982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1029.740054][ T1919] ? preempt_schedule_thunk+0x16/0x18 [ 1029.740088][ T1919] ? trace_hardirqs_on+0x38/0x1c0 [ 1029.740113][ T1919] ? trace_hardirqs_on+0x51/0x1c0 [ 1029.740135][ T1919] ? __mutex_lock+0x102f/0x1110 [ 1029.740155][ T1919] ? __mutex_lock+0x102f/0x1110 [ 1029.740174][ T1919] end_report+0x58/0x5e [ 1029.740202][ T1919] kasan_report.cold+0xd/0x37 [ 1029.740235][ T1919] ? __mutex_lock+0x102f/0x1110 [ 1029.740258][ T1919] __mutex_lock+0x102f/0x1110 [ 1029.794405][ T1919] ? io_ring_ctx_wait_and_kill+0x21/0x450 [ 1029.800157][ T1919] ? mutex_lock_io_nested+0xf60/0xf60 [ 1029.805531][ T1919] ? fsnotify+0xa36/0x1090 [ 1029.809950][ T1919] ? lockdep_hardirqs_on+0x79/0x100 [ 1029.815158][ T1919] ? debug_object_active_state+0x260/0x350 [ 1029.820970][ T1919] ? fsnotify_first_mark+0x230/0x230 [ 1029.826271][ T1919] ? debug_object_free+0x2e0/0x2e0 [ 1029.831397][ T1919] ? locks_remove_file+0x32a/0x590 [ 1029.836513][ T1919] ? fcntl_setlk+0xeb0/0xeb0 [ 1029.841197][ T1919] io_ring_ctx_wait_and_kill+0x21/0x450 [ 1029.846767][ T1919] io_uring_release+0x3e/0x50 [ 1029.851443][ T1919] __fput+0x283/0x920 [ 1029.855441][ T1919] ? io_ring_ctx_wait_and_kill+0x450/0x450 [ 1029.861253][ T1919] task_work_run+0xdd/0x190 [ 1029.865759][ T1919] do_exit+0xb89/0x2a00 [ 1029.869920][ T1919] ? find_held_lock+0x2d/0x110 [ 1029.874688][ T1919] ? mm_update_next_owner+0x7a0/0x7a0 [ 1029.880078][ T1919] ? get_signal+0x2f4/0x2160 [ 1029.884678][ T1919] ? lock_downgrade+0x6d0/0x6d0 [ 1029.889533][ T1919] do_group_exit+0x125/0x310 [ 1029.894132][ T1919] get_signal+0x3e9/0x2160 [ 1029.898559][ T1919] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 1029.904286][ T1919] ? io_link_timeout_fn+0x480/0x480 [ 1029.909485][ T1919] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1029.914857][ T1919] ? put_timespec64+0xcb/0x120 [ 1029.919622][ T1919] ? ns_to_timespec64+0xc0/0xc0 [ 1029.924478][ T1919] exit_to_user_mode_prepare+0x124/0x200 [ 1029.930114][ T1919] syscall_exit_to_user_mode+0x19/0x50 [ 1029.935589][ T1919] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1029.941494][ T1919] RIP: 0033:0x45e149 [ 1029.945421][ T1919] Code: Unable to access opcode bytes at RIP 0x45e11f. [ 1029.952255][ T1919] RSP: 002b:00007fba3b827be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1029.960669][ T1919] RAX: fffffffffffffff4 RBX: 00000000200002c0 RCX: 000000000045e149 [ 1029.968640][ T1919] RDX: 0000000020ee8000 RSI: 00000000200002c0 RDI: 0000000000000087 [ 1029.976611][ T1919] RBP: 000000000119c080 R08: 0000000020000100 R09: 0000000020000100 [ 1029.984588][ T1919] R10: 0000000020000040 R11: 0000000000000206 R12: 0000000020ee8000 [ 1029.992583][ T1919] R13: 0000000020ee7000 R14: 0000000020000100 R15: 0000000020000040 [ 1030.000992][ T1919] Kernel Offset: disabled [ 1030.008319][ T1919] Rebooting in 86400 seconds..