000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:21:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x5}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:21:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0xc, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_INACTIVITY_TOUT={0x8, 0x1, 0x7fff}]}}}]}, 0x3c}}, 0x0) 03:21:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000800000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000003400000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1712.883134][T12167] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops 03:21:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x6}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:21:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x8c, 0x0, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @broadcast}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0x8c}}, 0x0) 03:21:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000900000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1712.944115][T12172] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:21:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r3, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x328}, 0x1, 0x0, 0x0, 0x8004}, 0x4000004) 03:21:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003fffffffffffff00000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x8}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:21:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1e, 0x5, 0x1, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000480)=[{0x100, 0x111, 0x8, "ab5d3414ed3b5d8e3b168f42d41b4b04b1b8b842a7146da243aea69b6ef1e28503d4c22961ffa27cf31760c59f3098dd740f850dc02b4279f99846156f653c458ac302a39046ffb123ff575e78213ae0ea6e90a088abd5e83ba7559bffc90317df16b8f6c709517a4ab6b0a22b3fd63d37d0a130209b9e7abb0f02311bf848ed482ab073a73b7141a35f1fdc160cbd7da034504571296d68eb8c39a79ac6bbd227f6365bec0e7a7525a472e24389cdb302455f6585a161d8262071e5fb0b524e0e6a7f23e6440ec16afc7e4998d2d821aa0fc3ef13fab74293ec781c98d3b0b745801d9ede51715f5f"}, {0x78, 0x117, 0x7fffffff, "0880eb0493f64c60c5de9c49c51ad33ee60da4285bc16bfd00f49053303161070de60ceab46e5465107601966db975facb70127b69741e20d95aaf12530eef8c7de437aa9466beefd6f7e15d42b54eaff513f396b0422d8572d3002b6716244b53a8f930f4"}, {0x80, 0x0, 0x1, "db6430320da12ef464b630d06a540bb5ca01e19975fbb78094766373b545c9a53b9578a2b7d17945b264cced5a66baba6156ac5b272c419f73b10141ad1435c6a8806473cd67e1f633ba5d5f17910f0f65847e4c76e260a7618c375d7e403df903620e65a6661463fb"}], 0x1f8}, 0x20000001) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000014009ff300000000000000000a000200", @ANYRES32=r8, @ANYBLOB="14000100fe8000004e324901000000"], 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000011003b0e00200000000000000000ffff", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x7c, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x8, 0x2, 0x3f]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf7}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40001) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000)=0x8, 0x4) [ 1713.250648][T12172] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1713.364881][T12214] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1713.464002][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 03:21:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x12]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:21:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000100000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x9}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:21:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000a00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:50 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, 0x0}, 0x78) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', @ifru_data=&(0x7f00000000c0)="9e7c96092c0ebf1dc5d303c5b846dc917f817f0e93064d9411e23bf96de5da0a"}) [ 1713.763043][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1713.809084][T12214] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1713.843756][T12251] IPVS: ftp: loaded support on port[0] = 21 [ 1713.868780][T12256] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:21:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000200000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0xa}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1713.959425][T12251] virt_wifi0 speed is unknown, defaulting to 1000 03:21:51 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000140)={@ipv4={[], [], @empty}, r3}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x832b, 0x3, 0x8}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r6 = socket(0x840000000002, 0x3, 0x1) bind$inet6(r6, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') 03:21:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000c00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000300000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000e00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1714.184758][T12285] IPVS: ftp: loaded support on port[0] = 21 [ 1714.192992][T12256] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:21:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0xc}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1714.277522][ T29] audit: type=1800 audit(1596943311.270:1544): pid=12267 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=15746 res=0 03:21:51 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x13]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:21:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000400000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000f00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0xe}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1714.703718][T12258] IPVS: ftp: loaded support on port[0] = 21 [ 1714.788099][T12330] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1714.965649][T12285] virt_wifi0 speed is unknown, defaulting to 1000 [ 1714.973468][T12251] lo speed is unknown, defaulting to 1000 [ 1715.028482][T12330] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1715.390172][T12288] IPVS: ftp: loaded support on port[0] = 21 [ 1715.947913][T12258] virt_wifi0 speed is unknown, defaulting to 1000 [ 1715.954648][T12285] lo speed is unknown, defaulting to 1000 [ 1716.534575][T12288] virt_wifi0 speed is unknown, defaulting to 1000 [ 1716.910247][T12258] lo speed is unknown, defaulting to 1000 [ 1716.964288][T12288] lo speed is unknown, defaulting to 1000 03:21:57 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket(0x1000000000000010, 0x80802, 0x0) socket$rxrpc(0x21, 0x2, 0xa) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r2 = accept4(r1, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r3}, 0x8) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r3, 0x4}, 0x8) 03:21:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000500000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000001000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0xf}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:21:57 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x60]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:21:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a72ff58ab16f88b9663da5668b145e6313c17b22b9e79c9258687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e543506a3bfcb79eda41d0d8d5e649caab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9f11b0000ff7f0000"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000140)=ANY=[@ANYBLOB="307731516dd6894616de185d6ec38b09b31e1a50205e7e744d882d68ef0f45fbfede8360840ee1d06795b0c93c4e9104d246db43c38391d256979bc61635f89758514e49b2e7e69f9b5cd6d612"], 0x1}}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1720.849654][T12508] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:21:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x10}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:21:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000142700000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000600000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1720.916131][T12511] IPVS: ftp: loaded support on port[0] = 21 03:21:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x60}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1721.083515][T12511] virt_wifi0 speed is unknown, defaulting to 1000 03:21:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000003f00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000800000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1721.159144][T12508] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1721.693227][T12511] lo speed is unknown, defaulting to 1000 [ 1721.747764][T12517] IPVS: ftp: loaded support on port[0] = 21 [ 1721.795351][T12517] virt_wifi0 speed is unknown, defaulting to 1000 [ 1722.141882][ T21] tipc: TX() has been purged, node left! [ 1722.145772][T12517] lo speed is unknown, defaulting to 1000 03:21:59 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r3}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={r3, 0x7, 0x4, 0x7f}, &(0x7f00000002c0)=0x10) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x4) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5500000018007fd500fe01b2a4d180930a06000000a843089100fe803900080008000a0000dc13382d0010009b7a136ef75afbc9bff7de5cf25fa8e183f5448daa72540d8102d2c55327c43ab82286ef1fdd206523", 0x55}], 0x1}, 0x0) 03:21:59 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000003b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20800}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="030b00520000121ffc8a00faf70000009f7955a7c29603388f06e1e576a1572711f5c54a4685a65ee764a5bf2cb2d8ea8d24c8ddc27f4828b106cfa0b52bb364071b0a6404f3b9bbdcacaf4e77975cdb9c9f2905b908fd6ca794ea39f81941251e5e2b4fa1aeb7ec664e0523554a892300"/127], 0x14}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, 0x0, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001780)={0x48, r7, 0x0, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES16=r7, @ANYBLOB="200027bd7000fedbdf2504000000080100000000000000000200140001f2fd880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98"], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0xbe0}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 03:21:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000006000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:21:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000900000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) [ 1722.368930][T12639] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:21:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1722.414417][ T29] audit: type=1804 audit(1596943319.410:1545): pid=12644 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1848/memory.events" dev="sda1" ino=16231 res=1 03:21:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000586500000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000a00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:21:59 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f000038d000/0x2000)=nil, 0x2000, 0x3000009, 0x13, r0, 0x48c2d000) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0xa5a27f2e7ede6595, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x3}}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f00000013c0)={0x188, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x7ff}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x725}, {0x6, 0x16, 0x3}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3f}, {0x6, 0x16, 0x28ff}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x1ff}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x4b, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6}, {0x5, 0x12, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20008040}, 0x40) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000100)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010001000000000000040", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c300"/99], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="31000000000000000000090c00003c0003000800400000000000140002006c6f000000000000000000000000000014000300ff0300000000000000400300000000010800010001"], 0x50}}, 0x0) [ 1722.591389][ T29] audit: type=1800 audit(1596943319.410:1546): pid=12644 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16231 res=0 03:21:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:21:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000c00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1722.744918][T12639] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1722.762647][ T29] audit: type=1804 audit(1596943319.410:1547): pid=12644 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1848/memory.events" dev="sda1" ino=16231 res=1 03:21:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000008100000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1722.802559][T12674] IPVS: ftp: loaded support on port[0] = 21 [ 1722.880469][ T29] audit: type=1804 audit(1596943319.560:1548): pid=12654 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1848/memory.events" dev="sda1" ino=16231 res=1 [ 1722.974819][ T29] audit: type=1800 audit(1596943319.820:1549): pid=12683 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=16214 res=0 [ 1722.988333][T12674] virt_wifi0 speed is unknown, defaulting to 1000 [ 1723.212238][ T29] audit: type=1804 audit(1596943320.210:1550): pid=12654 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1848/memory.events" dev="sda1" ino=16231 res=1 03:22:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000e00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000ffffa88800000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:00 executing program 3: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000100)={{0x2, 0x0, @descriptor="a480e500ac488600"}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5}, 0x14) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r0, 0x707, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x100000002) 03:22:00 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) [ 1723.252353][ T29] audit: type=1804 audit(1596943320.240:1551): pid=12707 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1848/memory.events" dev="sda1" ino=16231 res=1 [ 1723.356221][T12715] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000f00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000ffffff9e00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1723.513557][ T29] audit: type=1804 audit(1596943320.510:1552): pid=12726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1849/cgroup.controllers" dev="sda1" ino=16210 res=1 [ 1723.648057][T12679] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1723.684216][ T29] audit: type=1804 audit(1596943320.590:1553): pid=12726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1849/cgroup.controllers" dev="sda1" ino=16210 res=1 [ 1723.721046][T12715] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1723.835363][T12679] IPVS: ftp: loaded support on port[0] = 21 [ 1723.921507][T12674] lo speed is unknown, defaulting to 1000 [ 1723.921553][T12679] virt_wifi0 speed is unknown, defaulting to 1000 [ 1724.281521][T12793] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1724.362770][T12679] lo speed is unknown, defaulting to 1000 03:22:01 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000001000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:01 executing program 3: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000040)={0x8, 0x22e}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_getnetconf={0x24, 0x52, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x4}, @NETCONFA_FORWARDING={0x8}]}, 0x24}}, 0x0) 03:22:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000fffffff000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000002000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1724.853272][T12826] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000007fffffff00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000240)=0x9, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1bd}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x4fd}}]}, 0x30}}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r8, 0x20, 0x70bd2b, 0x0, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}, 0x1, 0x6c, 0x0, 0x8000}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) [ 1725.051378][T12830] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 03:22:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000152700000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000ffffffff00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1725.328028][T12870] bond120 (uninitialized): Released all slaves 03:22:02 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000004000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300f0ffffffffffff00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@getlink={0x64, 0x12, 0x10, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8, 0x21184}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x64}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x3]}, 0x6) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 03:22:02 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x3, 0x800, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x7, 0x5}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r3, 0x14}, 0x8) syz_genetlink_get_family_id$devlink(0x0) 03:22:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000200000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000006000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1725.830907][T12956] IPVS: ftp: loaded support on port[0] = 21 [ 1725.835875][T12957] IPVS: ftp: loaded support on port[0] = 21 [ 1725.964816][T12957] virt_wifi0 speed is unknown, defaulting to 1000 03:22:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000586500000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:03 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000300000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0xc}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1726.049975][T12955] validate_nla: 4 callbacks suppressed [ 1726.049985][T12955] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:03 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000400000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000008000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0xe}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1726.609392][T13023] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1726.855747][T13023] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1726.915378][T12957] lo speed is unknown, defaulting to 1000 [ 1726.963999][T13056] IPVS: ftp: loaded support on port[0] = 21 [ 1726.976076][T12956] virt_wifi0 speed is unknown, defaulting to 1000 [ 1727.025684][T12960] IPVS: ftp: loaded support on port[0] = 21 [ 1727.581885][T12956] lo speed is unknown, defaulting to 1000 [ 1727.583322][T13056] virt_wifi0 speed is unknown, defaulting to 1000 [ 1727.989397][T13056] lo speed is unknown, defaulting to 1000 [ 1727.989474][T12960] virt_wifi0 speed is unknown, defaulting to 1000 03:22:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1728.404032][T12960] lo speed is unknown, defaulting to 1000 03:22:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r5, &(0x7f00000000c0)={{0x3, @rose}, [@default, @rose, @null, @default, @remote, @default, @default, @bcast]}, &(0x7f0000000140)=0x60, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 03:22:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000500000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000008100000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfffffcbe) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100), 0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x2, @loopback}, {0x0, @dev={[], 0x2a}}, 0x8, {0x2, 0x4, @loopback}}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r2, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0x8, {0x2, 0x0, @empty}}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="050400004000000000007e"], 0x14}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008044}, 0xc000) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8a4) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x6}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1c}, 0x0) 03:22:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1728.612699][T13180] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000ffffa88800000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x60}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000600000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1728.915944][T13180] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000ffffff9e00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000700000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:06 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000001002432408e623a2fb91b5b0ae474cd9", @ANYRES32=0x0, @ANYBLOB="b5219e774900000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000400ac1414bb08000600ac1414aa25000600a9fe"], 0x90}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket(0x11, 0x3, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_VERSION={0x5}]}}}]}, 0x48}}, 0x0) r5 = socket(0x10, 0x803, 0x7) ioctl$FITHAW(r5, 0xc0045878) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'bridge0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, 0x0, 0x0) getsockname(r6, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000180)=0x80) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x100, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4040810) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x4004840) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 03:22:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000fffffff000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:06 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0xf2a, 0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000040)={0x5, {{0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, [], 0xf}, 0x2}}}, 0x88) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:22:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000800000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:06 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x7]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) [ 1729.562575][T13252] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000007fffffff00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:06 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x80000, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/255, 0xff}, {&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000000480)=""/209, 0xd1}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000800)=""/217, 0xd9}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}, 0x2120) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000780), &(0x7f00000007c0)=0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000005480), &(0x7f00000054c0)=0x4) socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) writev(r3, &(0x7f0000001900)=[{&(0x7f0000000400)="b19462c33f5d8115ec7c43e324cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c7713ce44d0acec8d57d0ac439e24d4c7e6160356492dc21a4f94e67be791ec34221e762cd0f50ebc08b5a9a3d7b2c10a61673255ee1dd14e0bf57bf9afebd301941e2b3259c1506b98db698f5c9b319958d545d4e4d1db301dee1263e963665de6964774a1a8c82bda902ab3a57a6cb5fec6f469af8ca336c8e52ba6aae6eda763e8e5cca04f77089bb16d1cd0f75f6fe2a4f2f8f875d8be12571eec5a56f", 0xd8}, {&(0x7f00000005c0)="357664a6eb136a8c093aeda6ca78c84b1cc4ac9bb07939d040b691d81fe0f6c040df718502a23459a7c34ddf57b5325b6d8391372a758d24b206927b31fab6942f2c896931cc3c319c3633ad5cfe171a2f68d83077637bb27a168f7117", 0x5d}, {&(0x7f0000000640)="2a78283827cecf8957245bf3180ec6c0a49909b3a413aef335df99e8e3c1c3f07ace63be64816859c40233b9b157264489eb943f944a68884246ffc231f705280cedbc5a07f406", 0x47}, {&(0x7f0000000700)="c384a235c0", 0x5}], 0x4) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f00000001c0)=0xffffffc0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0xfffffffa}) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 03:22:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1729.683056][ T21] tipc: TX() has been purged, node left! [ 1729.696030][ T21] tipc: TX() has been purged, node left! [ 1729.722053][ T21] tipc: TX() has been purged, node left! 03:22:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000900000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000ffffffff00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1729.754302][ T21] tipc: TX() has been purged, node left! [ 1729.767133][ T21] tipc: TX() has been purged, node left! [ 1729.793015][ T21] tipc: TX() has been purged, node left! [ 1729.827040][ T21] tipc: TX() has been purged, node left! [ 1729.831992][T13252] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xc8142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000300)={@void, @val, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x32) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r2}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={r2, @in={{0x2, 0x4e22, @local}}}, 0x84) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x814) 03:22:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000a00000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300f0ffffffffffff00000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000c00000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000200000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x8]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1730.775165][T13350] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:07 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x7, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000240)=[{0x0, 0x0, 0x0}], 0x1, 0x4805) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000a608000000024200000000000000", @ANYRES32=0x0, @ANYBLOB="0047ce12ec3f27a205e4a55b2b32a0001008ad8afb00000000000008000400", @ANYRES32=r6, @ANYBLOB="0813876b0e2771c6e06d44d5636a463923da2abaa7756ab0183ad9468808ea94470219f7e016c547bf61dcca82a017b011e64fab0bd337a475c71d7ac557bdb480fb245cffee59d6d8b1892cee42f70797209f1987c012c278a7867bfb5003297ddb19d14151c325583741f67129508dd15265cddaec874e70abddec5bbf24b5e7943a492d0c5a0ff0d5c172799fe682203c670901e14b4a35ac0d54480d36af47a22c23cac1e85862141c639f3dde3793b1ddf25c752cd9f3"], 0x30}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local, @in=@private=0xa010101, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0xa18ba5ce26418916, 0x20}, {0x2}, {}, 0x0, 0x26e6bb4, 0x80000000000001}, {{@in=@rand_addr=0x64010101, 0x0, 0x6c}, 0x0, @in=@remote, 0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0xfffffffffffffeb5, 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000001c0)=[@sack_perm], 0x20000000000000ef) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:22:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000300000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f000030b000/0x4000)=nil, 0x4000, 0x2, 0x810, r1, 0x7a0d6000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 03:22:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000e00000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x9}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000400000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1731.448292][T13350] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000500000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000f00000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:08 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x9]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0xa}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="021800001b0000000e0000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000070019000000000002000000ac14ffaa000000000000008f0200000000000000fe8000000000000000000000000000ff000000000000000005000500000000000a00000000000000fe8000000000000000000000000000000000000000000000020012000000000000000000000000000600320000000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000ff", @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="15b376a3dc", @ANYRES32], 0xd8}}, 0x20000000) 03:22:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003001000000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000600000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000034000504d25a80648c63940d0224fc601000000004000500050082c137153e3709f3c63037a551788272", 0x2e}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg(r1, &(0x7f0000000480)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)="075fa4e8084d3eaa8b28d03363ed1554482cf549bd63a1f2df69ae6ab982f3f28bdd127e733bac7936821381bdbfd1749e1f9bf3b98c65bd490564055470da52c95f774881750623ec1c0bacdf2bf983b03efbb6a31cecc571d9ffd36209372979cfaa8389fee092869afae8c0c513dc2eff52e211a81d9c451d2bed21a7fe09c94e1f01e786601892c926bae0c95ac71e4f98161e83f4dab2ff6a84f1ad0a37e6b8d43b5072c533639776c0f967bc4cbbf4563305d86aa64fa3b6c4bd0a947e9ce310d8c3a354d75ea1499265f1fc0e8d72490b897f3d90a569a3e74cacb8defcaba742916b", 0xe6}, {&(0x7f00000002c0)="1568666d", 0x4}], 0x2, &(0x7f0000000340)=[{0xb8, 0x118, 0x8, "58e0af96ffb6cd8506ccef2cb4c1b67fc6f06c538e71710f76bd32106ec8246ed303cd9f8c43a1d94a1cbdc9d4a269be725e4be13537cf8065355c404b2201660796e81a533a7df6941583a7c28234641f469e8df018d54e48a1f9fc226f39db6273e9a835d9b67b24da13f50acb8764aff412821eef828386c2af56ca719052f86630d21dd51376ca54b8e0e934fade5ad75bee379c275c58194bafc06837d10b1ec4ddec"}, {0x80, 0x84, 0x2, "688771e2e9ddce1ee79079ff01f15742d2f9ca33a7ebf057994bf214028b19bc8af44bdf47a2856ac2405a7a69c5f75c58f5275e93863a7eb6b1f752f1293da571840771a4d5e992c5cc8d948befa98ce8ae887a8f54b8aa2b0dc4b681260372c40784b0078ce85c49dfd98b"}], 0x138}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000100)=0xc) [ 1732.084797][T13438] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1732.206997][T13450] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1732.259070][T13450] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1732.385199][T13438] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1732.393694][ T29] audit: type=1804 audit(1596943329.380:1554): pid=13401 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir438312914/syzkaller.wBvMXG/1876/cgroup.controllers" dev="sda1" ino=16113 res=1 [ 1732.501741][ T29] audit: type=1804 audit(1596943329.410:1555): pid=13404 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir438312914/syzkaller.wBvMXG/1876/cgroup.controllers" dev="sda1" ino=16113 res=1 [ 1732.559789][ T29] audit: type=1800 audit(1596943329.430:1556): pid=13441 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=15740 res=0 03:22:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000800712fb196a8051a39976353014922533a47288c9a837e6054aac22179e66066327c30272b3dcd70d6fe49bd3e5a67a7b284e4ab4a5ace57a6cfd57bc8da7c4b7db1bea4a03a4d1f362a70ceff9bf5507bfba296e866e73933786b0c9ac05a9536b04817800a0c1375f8", @ANYRES16=r2, @ANYBLOB="010000000000000000000d000000"], 0x14}}, 0x10) 03:22:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000700000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003006000000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0xc}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) [ 1732.630468][ T29] audit: type=1804 audit(1596943329.630:1557): pid=13459 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir438312914/syzkaller.wBvMXG/1876/cgroup.controllers" dev="sda1" ino=16113 res=1 03:22:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:09 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r3, 0x0, 0x8000000000004) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 03:22:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0xe}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300f000000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000800000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:09 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x84) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000900)={@mcast1, @private1={0xfc, 0x1, [], 0x1}, @empty, 0x38000000, 0x3, 0xcfc, 0x400, 0x3, 0x200}) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000240)="355482456fcbbde50dd8a863e03ac5ed1141f0f8832cb9a8e05e1899e55b8add4a", 0x21}, {&(0x7f00000002c0)="154c8e71ab789186e99c8c42084c4d6cd41591b356edbb0a1ec6d53d599c626f102f2fdeaf2daa2cc92c7388a2d0a657d54e6c00172f2d354c542284d7447ba82e4775b32c9f7d02e7467a196b87ba3cae8eb2cfd02ca2dcaafd8dd78fabdaeba856f14c0d312122dae288b6d64a51a52558eb9c2a64e14196dbcb742166453ed7563a78731893eefd16dac33a728e50bc1172144de832aefd", 0x99}, {&(0x7f0000000740)="805c55959abf4fc6c9d552554da54a8a7b1e0c4867d9fbf83a66f7b4c72d473132233cf1ee521924d8708980fc3577947af85c23aac2ebedb2ad2ad5d8d5d7b78840ea7486748ab57c97c0bbeac25f2b9ab90c3ce0c3e5901b78cfcccb49d3b5b1529aceb8d276d9a40d64d73cf124ee5687dcd52e887d3fff9ef02593a1a6b7d97a061ef5b0f67462daf2b27857f955d1e090521713a591544bcf9f204f76a86c7dd0ea37bdfd18a65d6c0d1f414470e4d6957ecf262cba02a84f7b465e79044155eb82455c0e71d03b", 0xca}, {&(0x7f0000000380)="e5be4c229c869f34ba80f1a9699743c7f33a414a9cbd32d17817b1cc61fb6cbc1bd678e2a3dc38abdb7efdd5b2aa", 0x2e}], 0x4, 0x369df5f6b828fdea) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x24, r6, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="0918", @ANYRES16=r6, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004800) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x120, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x20000050) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, &(0x7f0000000040)) [ 1732.841089][T13500] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0xf}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000003000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000000000000a062f696000000000a20000000000a01000000001c5c763d10af000000000000c74c458155478a156d000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a30000000007c64f07cf909afbdd2f35b7a62c68749ff3f8e581d6f41fbfc463af267ce73576e660de98f73fb557dde19b4cc61c9c236795e9a59d82dff1dacb60e69600eee3387f8fc3a5b613f921409214b71b082434c8435ac9bd44a4e"], 0xb8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000001) getpeername$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) sendfile(r6, r5, 0x0, 0x100000002) 03:22:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000900000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1733.152149][T13500] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1733.236117][ T29] audit: type=1800 audit(1596943330.230:1558): pid=13509 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=16068 res=0 03:22:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000a00000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:10 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', r5, 0x2f, 0x8, 0x0, 0x40, 0x6, @loopback, @remote, 0xf, 0x8, 0x1, 0xaade}}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x76) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000), 0x0, 0x2) 03:22:10 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xb]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x10}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000005000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000c00000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$FIBMAP(r1, 0x1, &(0x7f00000002c0)=0x1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000280)={0x2, 'veth0_vlan\x00', {0x9}, 0x3cc}) r3 = socket(0x1e, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004dc0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="ebe4882575391a4b456a6338985d4321de619afaa1c97c67ae8f09f29750b7ead34291d45f7bf06ecd8bf64d6abee3b38b8ffe688e19331bca2b049645d573b8af7c87ec146ca5759765f14975b9101d2d1982803f294cd8e9d1d716d6a7067c556c2757d074137c7eeb55f182772fd8aaad502e59ac64fcd8f7c73041bfa0e30b57796e7f2fd70b1ffa5e6f2f4fe074f940e287c0d158b970803f3d9620932ed29b23f6cd5b52a7b73b5adc1332efb888442aae195fb8d5cafcbbc00b3e2485f2bd9a2e8e29917e23524726e7ef268fdef6b8ff686e6ec2f3f323989c14", 0xde}, {&(0x7f0000000180)="9dce2d80353098143e40b18c7d14b2b5b397e159914b9f28a4afb6957e7c0ec834e51ffa21846b05381611d262d6009a4026d67bf24954fac4a68b849e15a3ba9da7b6504913c17473158b9e1857ae8c11ee246795e051860699d175f911a7468eb8f9593229902de46e595cde7f4a8b3843a8f2a084a5cc33107b74fd3e5ecc3c", 0x81}], 0x2, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffc0}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x48, 0x20000840}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)="1cdeadc2832202e0c33873fc0a825741b5bf6d6d2c3108a1e42b8c31ff557c80542dfda6e4b47b5d0fa30ff258cfcaf9d1e4c5a2079661afa394127ef1e09b1c4dbb44820c275c1118c7eead7c01b7a4cca5e25bcda2178bc4052d244f59b27281f47159da9315599a9bb1f53d9d799dfdc92162ce5b4138400f84dbdcd41b594f6e4573c021bbd69c2f917c5b", 0x8d}, {&(0x7f0000000640)="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", 0xfd}, {&(0x7f0000000340)="141079849846137870cabebb0ed9eb4245acc2750af71f5e", 0x18}, {&(0x7f0000000740)="79159f56879435092513682e770c0a87b2f8d1abccd59106df2ff89ec10455000e94debe9fe190a0711dea1f87e452a7102a2887a414fa1e4f298e57ab54ead9aa2b61e68fb7bbf046ed5bd9b9671c864237169aaa4ffc92bc58a0fc45d33b5b1b6df2c1193ad344a6f4beea06da3a523867f37201b4eb10020280c709c20fa2ed65474c4dccad733365dc169a797e3d283d273e405a08a589064fe6290e961641c81ae1d0f972f657286322d286240216", 0xb1}, {&(0x7f0000000800)="d6719140812525cff6ecff8351a0dcc9d7716fa9006244e38082fa7ec555f9891f60af656f45686676548b83c1db12de2699bc7be4ebb3368619756d1ac42eceecd4589386abf5572c405f773abdc57eb8e727088f182183e464fb1f01d2c812d77c058ee3b928c2c912beffc44f726ea895f7f4d43a7031dfd188", 0x7b}], 0x5, &(0x7f0000000900)=[@op={0x18}], 0x18, 0x8100}, {0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000940)}, {&(0x7f0000000980)="8f91a352f45f91b60dc0d282fbc8c98df4c799b5c0e4e5bfd9c5ab7a23b016d7a5660e70ec508499b168239b232d7520fd47bd1db3c9df0ebad3f15b4ca13e9dc06eaedb667af1afd930587cb975852c52819c7cd172a3924e7361ae35fe0998f83a34fe1c9422b77ddabce39fa5550dfba18563cb8c62655b2f440d8a951476bcf7a436a639", 0x86}, {&(0x7f0000000a40)="ba98fcd6a796274bc06606e5edb0fc9d9446e189635511d05050eaddc90f889629c82cea00f94dc32cc23658073451087dc0b26ad15cb675dea9e3b3877dfcc3df7780f3bb5943d1b479f1312afa9c0a9dfbc49607977aed20da3e597bca48a9a5286682724c465b1ef594cefa6cc38f82c84c1e87aa9ca7a75131857531dddcc45c6aba410fe97eaff0704da6d8a755644767b805edddf6223ea6bf4796de908591810c2a8f46d0442712c5ec5f18786f08052bc39f920a1ccfa1705bda0937417805556af0682c181903c63f251d11bf", 0xd1}, {&(0x7f0000000b40)="a9bc73872c3b039958b5daa8e91db0aac7bb6138f57f083a78b090a93ef3f6b7e44c49cce5a75f9d1ec5c959cd30f9f89a9717f7840166", 0x37}], 0x4, &(0x7f0000000bc0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x30, 0x1}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="e92fed5b61b6795e80f40bd8a377f9c29fe05822b0e5ff485b5a1e464f83533244ab5281db45d596e236d91ed98cb6e9f09dbcbb87b434fbecaff04f9693bc5b73fb76dde353962ecadc3ca65b87ccc223fd5638f991a40f093c1531f25d6e9ca5b10e5691fed39190fdb0eea25a7d4391c2d1280a0193546b6ca7aa6f673cc46c46e8a706b8eb5064bf0be651fe2e277801fecab60123f99bf5ca42c8af7d162c", 0xa1}, {&(0x7f0000000cc0)="6bcbd786173f5db3245c4ff79f34f17ff9cf6a0e6258f633dde342bbd70137b03b21e1fbe87f178f9f53644161c19f60c74765", 0x33}], 0x2, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d40)="49918903", 0x4}, {&(0x7f0000000d80)="2d809d4a287d9a37385885a65f67e138f70075c59bc1da2f762d7da0de2c5128b56462868a0a9ff2c7e69596b595f2a3ab88b35f5b9967f5ee53c33649cbd5bdc07a759391ddc759210f79807c7bcfc25babd871898c9087c5087cedbb19e99dac8de4dd7545bfc80d462d333e74f8da65d3d024b4b6c31c4b1a65bc", 0x7c}, {&(0x7f0000000e00)="3e8d1daeb310d86d016783353be287190efa73cd1adb71", 0x17}, {&(0x7f0000000e40)="a2dc83f3c57f", 0x6}, {&(0x7f0000000e80)="476a2bd3cb03c1d5c7e0f745cb2f08b58b7965b099c54759e8ac95f2f308b959c490fb9b9ed7cccbdabdfc5dfc481c3a7880c60a39af1d6f2ee940b8b43bff4b98254bfac0c5de2ed379c8a1427e5da81430d4706bf1076fa4ef592a59b9d78ad101d206dbc4bf0f66602a73b6038664c215507ee88a9f64709faa26a7075609bf35d4d36a97a3fd59b8a4788506035d4e803635d25a5400db149eef0ea23354c7a656127db43fba396b95e6ea9b871948", 0xb1}, {&(0x7f0000000f40)="785f7019937ae7c2c3f608c8cae0d732d76b83c96ad8cd403dfe8bd069b97e5e75ac236ffda691bf6903b2084bcae653971b3efb00640524583584dca102e55583c08343c80ad1c4bef22cd3008303cc0ebca78e56107fe0746fb69f4503c59fcf42e1a4295e0fc22208d6633c573c88aef0fd41eb8dbb9f2e0839abb7332ca04cac2d5dcaae4e8d5b", 0x89}, {&(0x7f0000001000)="94f5c458cd0ad72870c23eac245ce56fb3d4e9b740a86de4e6bfca2d614e65aea642574d716abbbe71c8e8f52023fc9f394f18fe3500f72ada3de641b214b7abc1110defb3d90a9934dbad0d7e9d3b33ed02f0acd4a147de1f3bb38cf79d95a2b1b2c198f771bb1c474081f8ad20042c21a1be7a3f82fdd0433cc6bf63171b2464712326c1b0b7f5c0f3e2c9fabbf77e8d65a1b2624d98006a49051e69f263ee56f4c41e513c92b905b23c8462158b6568a6634e49856e0231492fdbe118b0", 0xbf}, {&(0x7f00000010c0)="e0acaea5cffcc34586a187199e044589109354d3c4237b112a687d21fd9a7dba498568dd890ed767d3079c88dca687f00eff", 0x32}], 0x8, 0x0, 0x0, 0x2000c081}, {0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001180)="9b552004d97066c443d3adb4ac6487be132e0d2dd9dfa7b5bb027e34c4de04965c6903f0280bf3f112b9c3a46a07badcfdd97cc03035ebb6d502ccd1e7d79be38acf4e2f2c871b479fd1483983759362487ee9d35938fcb071b3cf1b58e7dcf60b5545aad385232d", 0x68}, {&(0x7f0000001200)="600ca16bdab185aad62ef4a7993efe9163306eaf7dc2e97cdd3ab4ef0bb1611527946a1989d050c4b6b362380c49064bf1b90ec18a256c50b16e8d299679a63d6dcea4a24a27966a520cbeb9e1028840a86dc72f19766932f8a0fcbc580b1ebf6376ab074a9890e268e51cbce7ffd79d2efc4952676709f26654fb19be318c4c87b469263c0a4e9027706d44a51ae3f50bc603d8e3086299c7ea431d905b25f7f96e6a71f35bc7292188dc3c7581ea6104c42c44fc2dc9ce53319f7e76f79ca6a893d3a0279f32cc3f486494a2e10ffaaf3126a6e9e5378533f45dd63762035f96", 0xe1}, {&(0x7f0000001300)="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", 0x1000}], 0x3, &(0x7f0000002340)=[@assoc={0x18, 0x117, 0x4, 0xcb5}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x28, 0x117, 0x2, 0xe, "3079737b5c32b3505f6dbcd924ee"}], 0x58, 0x90}, {0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000023c0)="19af92dfb87991132d61526fe0028d5c9d8c1a2c5715258a37936801347fd72c61ff457977eb49aea6fb17ad6c92c2bb2bb86caa515d3c2a5959277675509c2e01ad897d6eeb7b3adb757086a186116135bf2781550328a5d3daf5363a5402bc16a62fc143d2d35297dfd128f1eb9d2816c5b9e227a790ee1d5b4bb27fe3559485467d37ce1584173c22178c8ae03246ecdf5f1fd1f9f37269211decf3e710075cafa44d51dc53593274bc67391bab0862fd4c9dca674f61be8c83defd2a66ca5198a18efce8c09096713eca1a025c2a4dbe982390867e", 0xd7}, {&(0x7f00000024c0)="d4acc24838ba0f2ccf7cb9bb71968e2e22c744237374ab9b8b5572cb74efac2f869a64e12b000b222c1db919d7035b72b63e172f42a855f6e395f069d3926143689fa6206c846dac6427f88b0bc0f551e130f563e29bad1ec58fdb415765d4871cd21e64b98e588ec694c97cb9266b8b39123bcb23191868af2859254e27903e5c5d53117e830a1a566149263f1d418ef6c8e9e1af7ab5c786684bab09bfcba001040435ce4d1c85c8404a75c9637496814918f6c0de03a92c5460ac9faeaa80be6c734c2955ece567e7a99fbdb66b67f2c186debcee0d9321142ad6d4cf9a591d2a70262e90895903c0a891067f116f0c575a9d686d65125682", 0xfa}, {&(0x7f00000025c0)="5450c76ed0b2c38c506ef2284084f033ef9de4215aa5838f7638b952605d0ebed532ddc3211497c31997a263f140d1ab702eba15c0b2e9dca856d5fd9706ab3db7bbca5742b456aadd059bba131eaec0c5e5a749e06f9e19dbbe22ae4ca27c02354ceda59a2074926edfbc4f3f03569e8a1825e68a8ff788a8fe8ba6a6667302eac6fe0e5e9898a23c", 0x89}], 0x3, &(0x7f00000026c0)=[@assoc={0x18, 0x117, 0x4, 0x83}, @op={0x18}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x28, 0x117, 0x2, 0xe, "1079fb41fe54955aafbbe34e6e96"}, @assoc={0x18, 0x117, 0x4, 0x10001}, @iv={0xb8, 0x117, 0x2, 0xa0, "22bd9b0cf699b525c18c8d279b40dbe67b231a075ff285ae5e151366bdebd2459091619e2c16889bd2943d5465e7fd286caf6c810f160d4f4456433b2a68398024da5c218c3aaf31edb3e24925983cc1c6776754f9b1e40a7830cd12fa3977629c11bad11441b58aeb25dd06a43db168f04aef45fc3cbf9f2616e3402e588f3369fdb19913eb18b42e41f864fa7fc73cd429f99471451181f89c9dbe4a999ce4"}], 0x170, 0xc000}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002840)="141290646fb5e9bd", 0x8}, {&(0x7f0000002880)="096a11c10b77454ab99fbf4a6bbbf893ca2ba960c03d775e5c7c3c268edb40f832ab4038d1757d9ac0f082555dcd66dcc7744c3e39822ea6c892da868e2a", 0x3e}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f00000038c0)="16024c93f5642919ebba768b012465e54f315116d2c26e84d0f7bf3b749b57083ab925d4a1200b05eeb58c303894d8", 0x2f}], 0x4, &(0x7f0000003940)=[@assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x88, 0x117, 0x2, 0x6e, "b030b7f6e8b0bc8799c0a6e743316ca013b5b35a783dcf82a292085f5379f31bf976f952a8817b26aa1e03f6da163698dcf8b8f5bd0e27d8332794a7d719f208e1f78efa482613ea8321708a1c1f7babf1edabc3fb25d71cd8e917365e53d12cab73e911278d6465379b989f86b3"}], 0xa0}, {0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000003a00)="67cddd5851eba5309e0c9fea1de025b3f1e4e5ba75d3184224d6c1a682920e841eaa6ccdb095d1f4cd7f40ba62cb38bbab2ae66c0edfc596b092090946d81a0717a8855d80f8197ffd049d6d5fe44f8d90d3115a871bc09c929f111f82f9a0ae2f34ab8d2f85ebd178d543d22f3aa4a02e41c924366f56cce26fa924d289ea68b3e6f2ccb3c89cd9f7cc297568fdf49ba2cb6128e3eca69b0e2c973284b9847c59d7acb54fb09ba65af21939de3cbfca56802c46a411719eda4538f80c0cd61310a386989c60bd89295ae1824113a525b23bf7b43b6cba0c37e62bf4859048022201f1ce", 0xe4}, {&(0x7f0000003b00)="4f8fe3441d1f9ab6ff74424f7efc482b3a920d59111802f461e2f9f7a2fbc16d9996cd0e76455faf69c0f6ae6926fd7cefd256be4df75fa7e0961eba4385aa96a205f1984272392b1c957d6caba733aeb92d8522894bcdfd8c99677c36a7a93c9760b5031c2e8857df5022f38c8d7b903e2306f92a3dc89ae6ad0a26d50f2e5ea2d9959f6b9a8d2fdd9c674d8a40085d80753e46a54b48a86801c19058fd731bcbac21a9330051b484ce6a6c6a4a6adbd8f9d95192227d8d38e4223580d38309aa9188c722f938e89a7ea66aa11a78ca8660d17d1b5e43220efca896fe08139542959981ac94631410cd367728b9a766ab3e", 0xf2}, {&(0x7f0000003c00)="161a1c92ede62e6dd59c7eef7ae717e3eb6e41048abbc298b543", 0x1a}, {&(0x7f0000003c40)="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", 0x1000}, {&(0x7f0000004c40)}, {&(0x7f0000004c80)="992182d01f0987ffb0393cb1b675a5d48cc7578e1c4d0d6325a793a6a3f5347070b4599e9b97023ca425458acfb96cce421e2da8d7b9ff6be52cd6876e6c64f5fbf217acc09ed108b33f509ddcd3b842b123f2228185e3e387ee2de2f8dce3505eda0ae3a8c8d8cb9fb71e514120813230c2fb70474abb336fefcb47f55edd93b1e0d57d7d202d40480088c434e41d44a10550074d12f59c46f179a574d9fbb05d36d1", 0xa3}], 0x6, 0x0, 0x0, 0x40000}], 0x9, 0x4000) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000940)=@req={0x3fc, 0x0, 0x0, 0x3}, 0x10) sendmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x80, 0x0}}], 0x2, 0x0) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000240)=0x7ff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r4}) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x80, 0x0}}], 0x2, 0x0) connect$nfc_llcp(r5, &(0x7f0000000100)={0x27, 0x1, 0x1, 0x3, 0x4, 0x20, "0d8249449548a12161f22d8b738f9fb6b9919cc7eb8fe4686b5df85b9ce4aaf2fc86285581cf584ea354d00e03a953980618b08fa44dd8c199c482044df421", 0x10}, 0x60) [ 1733.552150][T13573] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1733.617031][T13582] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000e00000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000006000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x60}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000f00000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000009000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:11 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000014009ff300000000000000000a0002001c2debb1bc4449"], 0x40}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xc0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) [ 1734.455049][T13650] IPVS: ftp: loaded support on port[0] = 21 [ 1734.508369][T13650] virt_wifi0 speed is unknown, defaulting to 1000 [ 1734.568223][T13649] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1734.808042][T13582] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:12 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xe]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@mpls_getroute={0xbc, 0x1a, 0x200, 0x70bd2b, 0x25dfdbff, {0x1c, 0x14, 0x14, 0x7, 0x3, 0x0, 0xfd, 0xa, 0x2900}, [@RTA_MULTIPATH={0xc, 0x9, {0x400, 0x10, 0x2}}, @RTA_DST={0x8, 0x1, {0x9, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x6, 0x0, 0x1}, {0xfe9}, {0x9}, {0x3f}, {}, {0x5, 0x0, 0x1}, {0x7}, {0x1}, {0x6}, {0x3, 0x0, 0x1}, {0xfffe0, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8}, {0x4}, {0x8000, 0x0, 0x1}, {0x2}, {}, {0x7, 0x0, 0x1}, {0x5}, {0x200, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x6}, {0x8}, {0x40, 0x0, 0x1}, {0x80}, {0xff}, {0x3, 0x0, 0x1}, {0x4c, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7ff}, {0x5, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x8001}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x48005) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@nfc, 0x80, 0x0}}], 0x1, 0x2022, &(0x7f0000000100)={0x0, 0x989680}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 03:22:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000a000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003001000000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1734.978106][T13650] lo speed is unknown, defaulting to 1000 03:22:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000c000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003006000000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1735.146145][T13703] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1735.212829][T13651] IPVS: ftp: loaded support on port[0] = 21 [ 1735.398399][T13723] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 03:22:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000e000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300f000000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1735.671735][T13703] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000003000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000f000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xf]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:15 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89ed, &(0x7f0000000500)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@restrict={0x8, 0x0, 0x0, 0xb, 0x20000002}, @fwd={0xd}, @enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x2}, {0x5, 0x3}]}]}, {0x0, [0x5f, 0x61, 0x0, 0x0]}}, &(0x7f0000000080)=""/156, 0x52, 0x9c, 0x1}, 0x20) 03:22:15 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000014009ff300000000000000000a0002001c2debb1bc4449"], 0x40}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xc0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 03:22:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000005000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r1 = socket(0x10, 0x3, 0x0) poll(&(0x7f0000000000)=[{}, {}, {}], 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) [ 1738.346077][T13790] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003002714000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1738.485488][T13799] IPVS: ftp: loaded support on port[0] = 21 03:22:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003001427000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1738.587257][T13820] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 03:22:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000006000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1738.686739][T13799] virt_wifi0 speed is unknown, defaulting to 1000 [ 1738.687105][T13790] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300003f000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000009000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:16 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x10]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:16 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80c4}, 0x200008c1) bind(r2, &(0x7f00000001c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd6e2bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="ba0875002a00fb480dff720000a6516cce9d5bad1d19f11799a72fe950eb2839bf074c771692c54194ebeb0935cac36b84bd12eba87627eb50a5a0b722834fbc4311d911dfe74258227b26304e4827ac8c48d10623f3ff4a2595d0801fa7bfe3e75465e867af5b1e15f8da0d645092796fd88c324f72056b4e8f85d085631e2860f626b7fc06837ce5ae572f65fada26106a36ff2f9ce975fb3a3cb63600015b249f81d704fb92a34cd015f1d9c65b2250463934b90e90b349d8a032955984dd06157e8f307d1d7d4d17c1642332c909bf5e10e3772da29ef4fface4", @ANYRES32=r3], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@mcast2}, 0x14) r4 = socket$inet(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$binfmt_misc(r1, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5, @ANYRES64=r8, @ANYRESOCT, @ANYBLOB="584ca46454dcc71dced03f8834e61395fd60922e7ad7889fad25590befc9e6eeafd756ffa1ed4afbefcc63a4fa7ed6f4e22b53671df5383c33925d71a82fc9464be5eb48dad1f97d653eb68c567141aaad1c88889670c6ed8f224b93631ec31a382f542d5617bea4ae07a0b63089c1f795ed7a0aad88f98c11800515c3d7"], 0xfffffe58) splice(r0, 0x0, r4, 0x0, 0x847fda, 0x0) [ 1739.131500][T13868] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1739.166991][T13870] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1739.279959][T13799] lo speed is unknown, defaulting to 1000 [ 1739.459120][T13870] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1739.552515][ T29] audit: type=1800 audit(1596943336.550:1559): pid=13947 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=16253 res=0 [ 1741.085383][ T100] tipc: TX() has been purged, node left! 03:22:18 executing program 2: socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000030003dfa0032c000000000000000000004000100"], 0x18}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000340)={0x5, &(0x7f0000000240)=[{0x1, 0x1f, 0x69, 0x5e}, {0xfff7, 0x1, 0x57, 0x7fff}, {0x200, 0xe7, 0xe3, 0x3ff}, {0x7fff, 0x4, 0x0, 0x1}, {0x7f, 0x7, 0x40, 0x9}]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) getpeername$ax25(r2, &(0x7f0000000100)={{0x3, @rose}, [@netrom, @netrom, @remote, @bcast, @default, @netrom, @bcast, @netrom]}, &(0x7f0000000040)=0x48) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 03:22:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000a000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003006558000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x11]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:18 executing program 3: bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb00c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x41c315e80fe65aff}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000240)={0x6f, "d728a1a66b17f47e90d97c3e3c81ffde94a1cf6f9be7862e9cd7d5407873aadaa86c1d6739a66bb3d3291c9712a62938195d0f25d91488eea653bbc600b90c8de5d50451c4e5c83b363e294cb4a376f93eca3d796d474238ebd72a3c317a975ac40323b0880e92f0baa686226eca30ae5b526b638b7f19ddb3e7b0be9572936c"}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = socket(0x22, 0x6, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) socketpair(0x2c, 0x6, 0x8, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000700)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000800)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x5, 0x40, 0x21, @local, @local, 0x40, 0x2f, 0x80000001, 0x5}}) sendmsg$nl_xfrm(r5, &(0x7f0000000e40)={&(0x7f0000000600), 0xc, &(0x7f0000000e00)={&(0x7f00000009c0)=@report={0x418, 0x20, 0x200, 0x70bd26, 0x25dfdbff, {0x2b, {@in=@remote, @in=@loopback, 0x4e22, 0x1000, 0x4e20, 0x4, 0xa, 0x40, 0x80, 0x0, r6, 0xffffffffffffffff}}, [@offload={0xc, 0x1c, {r7, 0x1}}, @migrate={0x1cc, 0x11, [{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, @in6=@mcast1, 0x3c, 0x5, 0x0, 0x0, 0x2, 0x2}, {@in6=@loopback, @in=@local, @in6=@mcast2, @in=@remote, 0x6c, 0x0, 0x0, 0x3500, 0xa, 0x2}, {@in=@loopback, @in=@private=0xa010100, @in6=@local, @in6=@loopback, 0xff, 0x4, 0x0, 0x3503, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@local, @in=@broadcast, @in=@multicast1, 0x0, 0x2, 0x0, 0x3506, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, [], 0x1}, @in=@loopback, @in6=@local, @in=@remote, 0x2b, 0x3, 0x0, 0x3503, 0x2, 0xa}, {@in=@local, @in6=@remote, @in=@multicast2, @in=@loopback, 0xff, 0x3, 0x0, 0x3507, 0xa, 0xa}]}, @algo_auth={0xbc, 0x1, {{'sha384-avx2\x00'}, 0x3a0, "7316f411d53bca267c724a5268cf34a00b9e57b98eb94b984a10e109daa8769840b4ab4911cab8f0f8f6cf4a80d0f1b9a55f872d9b630279ec6ecdfc41e25b59d7ff0d7f237f0d75602a2856f7b82c6e46f6056227c2948fd14197333ec45b36b2bd4915870572345db3b9c04aa1e1efcfbb2047"}}, @algo_comp={0x98, 0x3, {{'lzjh\x00'}, 0x280, "278e7781ebca5e124b6284352235ecb0795f851755b757ac8982990cfde6b1ac7aaef4a926c3a3207b01812c805ada7b51987d686b9e56b56a68868874cb59fac223a3fa93b2c923ca8b406f642cd7fc"}}, @algo_auth={0x9f, 0x1, {{'blake2s-256-x86\x00'}, 0x2b8, "22fa5fbd9d847f1d23860375a999f6997d4ea305a26e8819f6d3982e498e63f5813a2eca7406b7725fbe84887ef0033a924c05482cd3d5baa2f8761299ca255ac3344c659a23c4a0fd14de34dcb817ff966c064f147d4f"}}]}, 0x418}, 0x1, 0x0, 0x0, 0x4004}, 0x4) socketpair(0x21, 0xa, 0x599d87bd, &(0x7f0000004380)={0xffffffffffffffff}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x7f) r9 = accept4(0xffffffffffffffff, &(0x7f00000043c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000004440)=0x80, 0x80800) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f00000044c0)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x2000000}, @ipx={0x4, 0x1f, 0xb00, "f0db7348c5b9", 0x4}, @nfc={0x27, 0x1, 0x2}, 0xfffd, 0x0, 0x0, 0x0, 0x2, &(0x7f0000004480)='veth0\x00', 0x6, 0x5, 0x9}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000004680)={0x0, 0xab, "134e934eec62ad27e05663e4fb6a2cd3bfa61b68999b249d2504f62087b12f17f73f212177285081d5a6c5fa3b346214830f606ec44653b8332bf5164c10c8aef02ceba49016e6acb97494a7bf2f2366a8480b00914410685db70d6aac68d9279eee0ba173f8d96b49a42b8008f3f6cc948b475c25f0037d79c193e831f0716a286de2a5ebc57bb661b549bec4f41debe97259dea7030eb03a4425ece8c62e2d606017f2a208ac2a1f49ee"}, &(0x7f0000004740)=0xb3) 03:22:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1741.572259][T13987] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000c000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000060000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:18 executing program 3: pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004800070800092500090007000a060000000000000001369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc0002", 0xffc7) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003, 0x1) 03:22:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1741.837092][T13987] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000e000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003005865000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x12]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000f000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/295], 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="c40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"/559, @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0xc4}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) accept$phonet_pipe(r5, &(0x7f0000000040), &(0x7f00000000c0)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000017c0)={r3}) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x1409, 0x4, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x800) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000001800)) [ 1742.528948][T14054] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003002715000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000081000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={r5, 0x1}, &(0x7f00000002c0)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r7, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x908a004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x7, @bearer=@l2={'ib', 0x3a, 'vlan0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000400}, 0x0) [ 1742.823635][T14054] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000020000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000f0000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1742.942725][T14091] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:22:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003001527000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1743.239641][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1743.320288][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:22:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x13]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000040030000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x12]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x0, 0x400, 0x200, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffffe}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 03:22:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000040000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000003400000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1743.471995][T14167] validate_nla: 1 callbacks suppressed [ 1743.472005][T14167] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003006558000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) r2 = socket$netlink(0x10, 0x3, 0x30) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c65309385943d30205e2df7b08dd491656d6f72792e657665eb521d078e2372c64b9cd509290573bf542d6943a89ac7f0a5cd55854fb83e762b03e4b96101ffe371f4afd52f9209eeeacb5d65f04751f0caca27b2b1f3608c73d66a18c484aeead1b950a92e2214ac483a01233932e9ec16149749f7a53c09db00"/148], 0x111) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x141080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r3) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 03:22:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1743.636770][T14176] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 03:22:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300fffff00000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1743.821010][T14167] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000060000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x60]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000100000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) listen(r1, 0x9) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x5}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @empty}}}], 0x20}}], 0x1, 0x0) 03:22:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003005865000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000200000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1744.282147][T14262] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000081000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1744.524877][T14262] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x54, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x5) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="058a000000000000128008000100707070000c000280080001000000", @ANYRES32=r2, @ANYBLOB="08001f0005000000"], 0x40}}, 0x0) 03:22:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000300000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0xc) r3 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, 0x0, 0xc9) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000400440202004c001280080001007369740040000280060011004e23000008000100", @ANYRES32=0x0, @ANYBLOB="0800140001000000080003007f00000114000b0000000000000000000000000000000000060011004e22000008000a00c4ea5c57acf5f6ecbe326347a03eace62dea35ec4b2a4f6440f05c92702a049f79750a3fccba784dfa8299d26ff57441eec77cece34d4a1dda2eaec42a0031bf447a64f56e420d957d9c50d9c01f773c8294dc0ab83c092c5b01f6b5fdaf739c668d7a545c9c618893bd401c0f220282ce8512dd661bbe90a771e0fa1d0df11046639a633db93849a6edf3beb6d796d4bcca27aa7bf79eb6507db373ac2ec06a73b3cab9d4a184ce4299060b9b47ab3fbcddc292a178f0ffee8e4551bb710a42513ee30788eeaaaa5c8d3cb82b9705a8da1f290e042519711764ec56ddda95db5553dcb2ace8fc27a7387da944d3cc2c1561cf0a829b1283b6f27d", @ANYRES32=0x0, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 03:22:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8ee}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1744.720219][T14311] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1744.764358][T14321] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 03:22:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000400000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000f0000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:21 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x154, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x57}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x54be9a2850b119f0}, 0x11) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0302000000000000140012000c000100626f6e64"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd29, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x40440c4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20607080}, 0xc, &(0x7f0000000800)={0x0}}, 0x8001) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000810) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000240)={0x27, 0x0, 0x2, 0x0, 0x2, 0xf, "d5acae84029bc2a749838ffe86301dfb4e6ff33a290fb3825b05e2234770498a0f9dc374f7186535b90f8ef57dde3fa1f7a470d18b56e37bfb8166384f5175", 0x39}, 0x60, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x44000}, 0x0) 03:22:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000040030000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1745.026330][T14345] IPVS: ftp: loaded support on port[0] = 21 03:22:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r5, 0x800, 0x2, 0x55777157}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x5, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x6, 0x9, 0x0, 0xfffffffffffffff8, 0x8}, @jmp={0x5, 0x1, 0x3, 0x0, 0x9, 0xfffffffffffffff4, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x78) 03:22:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa00}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000500000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1745.096401][T14350] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1745.138877][T14345] virt_wifi0 speed is unknown, defaulting to 1000 [ 1745.180865][T14355] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1745.475715][T14365] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:22:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000600000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000003400000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1745.686647][T14350] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1745.758068][ T29] audit: type=1800 audit(1596943342.750:1560): pid=14361 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=16280 res=0 [ 1745.801712][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1745.908847][T14428] IPVS: ftp: loaded support on port[0] = 21 [ 1746.031255][T14349] 8021q: adding VLAN 0 to HW filter on device bond122 03:22:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x4, 0x3, 0xc4, 0x9, 0x22, @empty, @local, 0x20, 0x1, 0x3ff, 0x80000001}}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000b80)={'ip6_vti0\x00', &(0x7f0000000b00)={'ip6tnl0\x00', 0x0, 0xd62196fc8391aa36, 0x0, 0x5d, 0x7, 0x60, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @rand_addr=0x64010102}, 0x7, 0x8, 0xe6bc, 0xffffffff}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="18020000", @ANYRES16=0x0, @ANYBLOB="00042700002c00018008000100"/22, @ANYRES32=0x0, @ANYBLOB="08060000", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000400000008000300020000000c00018008000300030000006000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007663616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000004c0001800800030001000000140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e31000000000000000000000008000300030000005c00018008000300010000001400020076657468305f766c616e00000000000008000300010000000800030000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000300030000001400020076657468305f766972745f776966690020000180140002006e7230000000000000000000000000000800030001000000280001801400020067656e657665310000000000000000000800030001000000080003000000000058000180140002006d6163767461703000000000000000001400020069705f7674693000000000000000000008000300020000001400020076657468315f746f5f6873720000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0c0001800800030006000000180001801400020076657468305f746f5f62617461647600"], 0x218}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 03:22:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000700000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300fffff00000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) [ 1746.226597][T14428] virt_wifi0 speed is unknown, defaulting to 1000 [ 1746.228958][T14345] lo speed is unknown, defaulting to 1000 [ 1746.328891][T14494] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1746.608002][T14512] bond124 (uninitialized): Released all slaves [ 1746.797062][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1746.891378][T14345] 8021q: adding VLAN 0 to HW filter on device bond123 [ 1747.008246][T14428] lo speed is unknown, defaulting to 1000 [ 1747.292946][ T100] tipc: TX() has been purged, node left! [ 1747.298955][ T100] tipc: TX() has been purged, node left! 03:22:24 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000270000/0x1000)=nil, 0x1000, 0x2, 0x28032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8001, @private0={0xfc, 0x0, [], 0x1}, 0x2}], 0x1c) 03:22:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000100000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe00}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000800000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:24 executing program 3: syz_genetlink_get_family_id$fou(0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe2b9c5094dab0b45}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) 03:22:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000900000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000200000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:24 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="00f7ac9ff04229521b200000000b0605000000090002"], 0x20}, 0x1, 0x0, 0x0, 0x40044}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_x25_SIOCDELRT(r1, 0x890b, &(0x7f0000000100)={@null=' \x00', 0x3, 'ip6gretap0\x00'}) ioctl$FIOCLEX(r1, 0x5451) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @private=0xa010101}, 0x201, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6gretap0\x00', 0x1, 0x3}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x3a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}, {0xa, 0x4e24, 0x0, @mcast1, 0x3ff}, 0x7, [0x9, 0x2, 0x1, 0x1, 0x4d0e, 0x800, 0x8, 0x8ab4]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, [], 0x33}, 0x2}, {0xa, 0x4e23, 0x0, @remote, 0x3f}, 0x7, [0x6, 0x0, 0x7a9, 0x5, 0x7ff, 0x7ffb, 0x8, 0x7]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0xce21, 0xfffffffc, @mcast1, 0x916d}, {0xa, 0x4e24, 0x8651, @empty, 0x7}, 0x0, [0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0xfffffffc, 0x7]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc9, 0x0, 0x0) 03:22:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf00}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1747.662115][T14700] IPVS: ftp: loaded support on port[0] = 21 03:22:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000300000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000a00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1747.762558][T14674] bond125 (uninitialized): Released all slaves [ 1747.778214][T14700] virt_wifi0 speed is unknown, defaulting to 1000 03:22:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0xffef}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000011000d0400"/20, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) 03:22:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000c00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000e00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000400000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5865}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1748.212029][T14762] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:22:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000f00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1748.875937][T14700] lo speed is unknown, defaulting to 1000 [ 1748.893284][T14716] IPVS: ftp: loaded support on port[0] = 21 [ 1749.134855][T14775] validate_nla: 8 callbacks suppressed [ 1749.134865][T14775] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1749.524102][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c5e8bc3a: rx timeout, send abort [ 1749.536490][ C1] vcan0: j1939_tp_rxtimer: 0x00000000cf20d940: rx timeout, send abort [ 1749.589567][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000cf20d940: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1749.604245][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000c5e8bc3a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1751.648816][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c695323b: rx timeout, send abort [ 1752.157520][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c695323b: abort rx timeout. Force session deactivation [ 1752.247451][ C0] vcan0: j1939_tp_rxtimer: 0x000000007ca4b61c: rx timeout, send abort [ 1752.755712][ C0] vcan0: j1939_tp_rxtimer: 0x000000007ca4b61c: abort rx timeout. Force session deactivation 03:22:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r2, 0x5f, 0x0, "771e7d236633fc74b99d62078ef380c832c5543d368232a15264dfdc5b4b9a456e7cbc61ee18e171b6f21bef5a5f355bb688bdd5317e629b1dbcb9e28edc99ed07b6c497832820094248c54070f74de196d7da672755c647a95afe1c62fbe38cf92acf5a179f2713aeadc1c148a261f2"}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xf, 0x0, 0x3f00) 03:22:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000500000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000001000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:30 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039eecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x3, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0x3c}}, 0x0) 03:22:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000600000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1753.578040][T14919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1753.595220][T14922] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6558}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000142700000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1753.661437][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:22:30 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth1_virt_wifi\x00', {0x7, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r5 = socket(0x10, 0x803, 0x6) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x68) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000200)={@none, 0xfff, 0x6, 0x8003, 0x2, 0x0, "d08777b69d6bac0e55e5adbbd80703f89a4e75a9e948448b64286f90ddc18635590a92084eb5982bf1ea1e0123b70ab56d2170bf723b1769a42edee55ce02438c3affb8f868e3203ef38e0dee44fa3e8aff4853b887c85231c122a215978771fc58c42276a5361967879f794441e38f4ee99ba8111636c411545acedc6d2d3c6"}) 03:22:30 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000240)="bda7ab81e059c51b6fb06369771fbd6c28d17ef04277861306034839f8e0cb2df186b5c3b681f71dfedf8334f727345437965cf412d53319b23e11a70f343627ddf9a04fb30f7aad6676b8a7da86e8c17706f1e9e8b9ab112d1c9bd3daa40c98c490031b12ffc6bb0cb3c31d04ecb7dcc551972c44904b1a9aadc9e3f3d86543296f8bfed6d3", 0x86) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r3, &(0x7f0000000400)="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", 0x200, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000002c0)) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) r4 = socket$key(0xf, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000240)=0x54) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) 03:22:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000700000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1753.842828][T14922] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1753.922257][ T29] audit: type=1804 audit(1596943350.920:1561): pid=14960 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir438312914/syzkaller.wBvMXG/1891/memory.events" dev="sda1" ino=16341 res=1 03:22:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000003f00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1754.022159][ T29] audit: type=1800 audit(1596943350.960:1562): pid=14960 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16341 res=0 03:22:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xee08}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000006000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1754.088055][ T29] audit: type=1804 audit(1596943350.970:1563): pid=14960 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir438312914/syzkaller.wBvMXG/1891/memory.events" dev="sda1" ino=16341 res=1 [ 1754.145247][ T29] audit: type=1804 audit(1596943350.980:1564): pid=14960 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir438312914/syzkaller.wBvMXG/1891/memory.events" dev="sda1" ino=16341 res=1 03:22:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000800000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:31 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000240)="bda7ab81e059c51b6fb06369771fbd6c28d17ef04277861306034839f8e0cb2df186b5c3b681f71dfedf8334f727345437965cf412d53319b23e11a70f343627ddf9a04fb30f7aad6676b8a7da86e8c17706f1e9e8b9ab112d1c9bd3daa40c98c490031b12ffc6bb0cb3c31d04ecb7dcc551972c44904b1a9aadc9e3f3d86543296f8bfed6d3", 0x86) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r3, &(0x7f0000000400)="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", 0x200, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000002c0)) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) r4 = socket$key(0xf, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000240)=0x54) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) 03:22:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000586500000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1754.235372][ T29] audit: type=1800 audit(1596943351.010:1565): pid=14960 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16341 res=0 [ 1754.326890][ T29] audit: type=1804 audit(1596943351.050:1566): pid=14960 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir438312914/syzkaller.wBvMXG/1891/memory.events" dev="sda1" ino=16341 res=1 [ 1754.367996][T15002] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1754.451312][ T29] audit: type=1804 audit(1596943351.050:1567): pid=14979 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir438312914/syzkaller.wBvMXG/1891/memory.events" dev="sda1" ino=16341 res=1 [ 1754.563979][ T29] audit: type=1804 audit(1596943351.360:1568): pid=14998 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir438312914/syzkaller.wBvMXG/1892/memory.events" dev="sda1" ino=16343 res=1 [ 1754.598502][ T29] audit: type=1800 audit(1596943351.360:1569): pid=14998 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16343 res=0 [ 1754.630771][ T29] audit: type=1804 audit(1596943351.360:1570): pid=14998 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir438312914/syzkaller.wBvMXG/1892/memory.events" dev="sda1" ino=16343 res=1 [ 1754.632250][T15002] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:31 executing program 3: socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000000000c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x800000000000c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r3) ioctl(r3, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3f, 0x0) 03:22:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000008100000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000900000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:31 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00') r5 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000029c0), 0x80400) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r6}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000002a00)={0xe0, 0x2, 0x8008, 0x4, 0x2, 0x1, 0x3, 0xe79, r6}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c004000", @ANYRES16=r4, @ANYBLOB="08002c37b9fccd3864e74aabfd6dadbd700005fbdf25050000000800030000c364afbca450738483c4271000000093dbf2ef9abf55d4cbec2fced8731f23b2b379bd72b017a493cb27bdfab9e341eff5cb64f7d25445d577ee84a439f24dd5006276e585ae98325d13a5b567"], 0x1c}, 0x1, 0x0, 0x0, 0x44041}, 0x80000) getsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000300)="ad", 0x1}], 0x1) 03:22:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x33f, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r1}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001200)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x7, 0x2}, 0x90) 03:22:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300ffffa88800000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000a00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1755.076943][T15073] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:32 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140009000201e2070000fc000005eaffffff0500"], 0x14}}, 0x0) socket(0x0, 0x0, 0x0) 03:22:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000c00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1755.328431][T15094] IPVS: ftp: loaded support on port[0] = 21 [ 1755.348394][T15073] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1755.533425][T15094] virt_wifi0 speed is unknown, defaulting to 1000 03:22:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300ffffff9e00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000e00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1756.030872][T15094] lo speed is unknown, defaulting to 1000 03:22:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:33 executing program 3: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f0000002b80)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r6, 0x10001, 0x1000}, 0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002bc0)={r4, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f0000002c80)=0x84) socket$netlink(0x10, 0x3, 0x0) [ 1756.122388][T15099] IPVS: ftp: loaded support on port[0] = 21 [ 1756.154174][ T21] tipc: TX() has been purged, node left! 03:22:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000f00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1756.185885][T15159] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300fffffff000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1756.272813][T15163] IPVS: ftp: loaded support on port[0] = 21 [ 1756.395083][T15163] virt_wifi0 speed is unknown, defaulting to 1000 03:22:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000001000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030088a8ffff00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1756.502329][T15159] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1757.220260][T15163] lo speed is unknown, defaulting to 1000 [ 1757.246417][T15171] IPVS: ftp: loaded support on port[0] = 21 [ 1757.371048][T15171] virt_wifi0 speed is unknown, defaulting to 1000 [ 1757.870815][T15171] lo speed is unknown, defaulting to 1000 03:22:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev, 0x12}, 0x1c, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf251b00000007"], 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 03:22:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000f0ffff00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000002000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:36 executing program 3: socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0224fc60070002400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x2000}, 0x2404c0c6) [ 1759.335403][T15292] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1759.352158][T15294] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000152700000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1759.379449][T15298] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 03:22:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003007fffffff00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1759.466205][T15299] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 03:22:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)={'ip6_vti0', 0x32, 0x32}, 0xb) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x6c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x70}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4084}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x15, 0x4) shutdown(r0, 0x2) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)=@default) [ 1759.515793][T15299] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 03:22:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000004000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:36 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000040)={r8, 0x38, "57098fca947e6ef067fd52de89d68e8b81f04ca6c131e74145072c35a6a888304c18c0047930f3aa57187d9103d49665d14048537bcdd339"}, &(0x7f0000000100)=0x40) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r8, 0x40}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r9, 0x5, 0x10001, 0x8}, &(0x7f0000000140)=0x10) 03:22:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003009effffff00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1759.652136][T15294] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000006000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000586500000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300f0ffffff00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:37 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000040)={r8, 0x38, "57098fca947e6ef067fd52de89d68e8b81f04ca6c131e74145072c35a6a888304c18c0047930f3aa57187d9103d49665d14048537bcdd339"}, &(0x7f0000000100)=0x40) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r8, 0x40}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r9, 0x5, 0x10001, 0x8}, &(0x7f0000000140)=0x10) 03:22:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000008100000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1760.535829][T15385] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:37 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8913, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYBLOB="9e7d80f3640eee8fbf58d7e4dc332bfcf9016d77d4c7952ee0631771407947410824ef15281937fc9a2537c35bdc14061db34076c9819cb2bb0c5dfa15387fee8ed244a06a7aa35c69aab937dd1e6d33159af3664bf08576157913575a85f3d7685de25bb0d69b93fe8dd105faf1dcf5f50d1fedfa7afd4c9eed77dd2099c7036cd4ef548dbb0dd9c55d60790687c19b576dc3a7694a68af713ab9be3328207f59587d2f9a7a320ee65dee82b98534fe08774219bd4ca9c3fd3982a43287fdd573870422ba9fce9722c40011d10c16b03889bf246a1b961fd4fce49511e117", @ANYRESDEC=r1, @ANYRES64=r2, @ANYRESHEX=r3]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 03:22:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000007000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:37 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000040)={r8, 0x38, "57098fca947e6ef067fd52de89d68e8b81f04ca6c131e74145072c35a6a888304c18c0047930f3aa57187d9103d49665d14048537bcdd339"}, &(0x7f0000000100)=0x40) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r8, 0x40}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r9, 0x5, 0x10001, 0x8}, &(0x7f0000000140)=0x10) 03:22:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300ffffa88800000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000034000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1760.806327][T15385] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:38 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000040)={r8, 0x38, "57098fca947e6ef067fd52de89d68e8b81f04ca6c131e74145072c35a6a888304c18c0047930f3aa57187d9103d49665d14048537bcdd339"}, &(0x7f0000000100)=0x40) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r8, 0x40}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r9, 0x5, 0x10001, 0x8}, &(0x7f0000000140)=0x10) 03:22:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300ffffff9e00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300fffffffffffff000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1761.110618][T15438] IPVS: ftp: loaded support on port[0] = 21 [ 1761.236333][T15438] virt_wifi0 speed is unknown, defaulting to 1000 [ 1761.261399][T15456] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1761.512853][T15456] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1761.834849][T15443] IPVS: ftp: loaded support on port[0] = 21 [ 1761.845234][T15438] lo speed is unknown, defaulting to 1000 [ 1761.886567][T15443] virt_wifi0 speed is unknown, defaulting to 1000 [ 1762.123238][ T21] tipc: TX() has been purged, node left! [ 1762.139865][ T21] tipc: TX() has been purged, node left! [ 1762.154516][ T21] tipc: TX() has been purged, node left! [ 1762.317351][T15443] lo speed is unknown, defaulting to 1000 03:22:41 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x3], @random="3aa258631481", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x58}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 03:22:41 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000040)={r7, 0x38, "57098fca947e6ef067fd52de89d68e8b81f04ca6c131e74145072c35a6a888304c18c0047930f3aa57187d9103d49665d14048537bcdd339"}, &(0x7f0000000100)=0x40) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r7, 0x40}, &(0x7f00000000c0)=0x8) 03:22:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300fffffff000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000001000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:41 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) [ 1764.597864][T15570] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000002000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030088a8ffff00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:41 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000040)={r7, 0x38, "57098fca947e6ef067fd52de89d68e8b81f04ca6c131e74145072c35a6a888304c18c0047930f3aa57187d9103d49665d14048537bcdd339"}, &(0x7f0000000100)=0x40) 03:22:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000880), 0xc, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4065002}, 0x4080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "3dc1216f99066f14", "ce4b7245b2cac114719918dc21df2c3eb39597c5bd17e5d07c2598233205878b", "156d48ea", "10af94a442db11f1"}, 0x38) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a5900df00000000e9000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 03:22:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000003000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1764.884377][T15570] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000f0ffff00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:42 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 03:22:42 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000470500008b52838495da77090000080002"], 0x1}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$nl_route(0x10, 0x3, 0x0) 03:22:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000004000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003007fffffff00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:42 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) 03:22:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000005000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003009effffff00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1765.396021][T15648] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:42 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000006000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300f0ffffff00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1765.668008][T15648] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:43 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000007000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000008000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:43 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ppoll(&(0x7f0000000280)=[{}, {}], 0x2, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000100)=0xb0, 0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r2, 0x0, 0x100000001) socketpair(0x8000000000001e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000000180), 0x0, 0x0) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x143, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xf0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x1058}, {0xffffffffffffffff, 0x180}, {0xffffffffffffffff, 0x4}, {r1, 0x400}, {r0, 0x402}, {0xffffffffffffffff, 0x624c}, {0xffffffffffffffff, 0x86}], 0x7, &(0x7f0000001200)={0x0, 0x3938700}, &(0x7f0000001240)={[0x80]}, 0x8) 03:22:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000034000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1766.221085][T15717] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:43 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) socket(0x1e, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000009000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300fffffffffffff000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:43 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1766.445664][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1766.445677][ T29] audit: type=1804 audit(1596943363.440:1573): pid=15728 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1887/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 1766.524729][ T29] audit: type=1804 audit(1596943363.470:1574): pid=15728 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1887/memory.events" dev="sda1" ino=16364 res=1 [ 1766.563939][T15717] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000000000a000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65580000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:43 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000001000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1766.728618][ T29] audit: type=1800 audit(1596943363.470:1575): pid=15728 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16364 res=0 03:22:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:43 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001a000503030000008d63940d0124fc60100006400a0002bd000000000000000000000000e43da71a441c", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0xb00000000065808, 0x0) sendto$l2tp6(r1, &(0x7f00000002c0)="2955e649d494375bc7a8d04de567ff07080f9e4a89eca3c02205cedec4775061a2d7120e67948246eb12c0c03afc2806b4a216f0accd4e3bbd1a7b3e00c443c9e0358b", 0x43, 0x4000, &(0x7f0000000180)={0xa, 0x0, 0x2, @empty, 0x6, 0x4}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000140)) sendfile(r2, r1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x7, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="95c40000000000000000010001590000000009410000004c00180000000062726f6164636173042d6c696e6b00000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000083b5aafb0f41b78e3d82e1f47352c7797d151e1585230a254a5a1b14b7e297c560d96d93e6e9dba2199a2770b85a4ee7ab45ee8bf9acc73361a98d30ed52dcbc4fe31c2795321bf5b064d19a857ab03c9b60243d5e71377b5e10752449d7ae35d272021623056a9e84a82cc6a4552892d20917e21d4bd25f93a87a6af189fdc3d8a0ffb855f8a4a9ad43b7011c2eb4bdf0c427a26c91"], 0x68}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)=0x9080) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0xdc3, 'syz1\x00'}) socketpair(0x22, 0x3, 0xffffffff, &(0x7f00000015c0)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) 03:22:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x81000000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000000000c000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000002000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1766.949802][T15792] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 1766.989715][T15792] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. 03:22:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000000000e000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000003000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1767.003642][T15794] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000000000f000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:44 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) mmap(&(0x7f0000fbb000/0x2000)=nil, 0x2000, 0x380000d, 0x10, r0, 0x28244000) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000280)=@generic={0x0, 0x0, 0x4}) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[], 0x9240db9) recvfrom(r2, &(0x7f0000000040)=""/184, 0xfffffffffffffe07, 0x40012500, 0x0, 0xfffffe53) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan0\x00'}) [ 1767.237762][T15794] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:44 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000004000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000010000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:44 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000005000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000001427000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1767.714795][T15861] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xee080000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000006000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000000003f000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000060000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:45 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000008000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:45 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000000000000000000000016000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xdc, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffffb}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}}}]}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={[], [], @multicast1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xdc}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000030000000b70000000000000095000000000000006f8830bf511507964b79f7acf0af839ec5300a584fe44c80de0b061417e9adb31b01536cc3d2f2518ae3961a29eaf9fa7e22f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae7b28e6902c04006cc6983945dd3663f79f6799f0f0af9f42df3588c012df45855e54c1f5740f66099a0f54041889b971cf4f812934b41222da54b9768cbc521157fae52a3e6470711727c4a32a6b7e0ed7f139814b20263d6acdae05d2b3fed476d2adda686d3ccb9a1de46037f57f00f535d8b3078e70a7fc58f7a528c5022feec18e01bd8fda2b9677fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b9c7f829512099df32814820fbf7be91cd13b77f4e421af2ef9e5996273686e99f8bbca3882478560cd18fa2c0b7d787ba2fe4c02c5ce877b3256b7aa1d4328eaf1bdd66c1360ea9a416889f4daf1459333ef4e1fd97904d7b496d84fddb684e4fdc27e5b719d63e578ae4ce1c6993a3702d25312d009729dc2e2e0da51dcec2dec97d130929455c58b7652d14e7def9b7576100aa8b34d68bf798c74a4e1483a68a40dbf7a15001d9df07cd078311497453083324a11b56571130393495e5506621efe55afabbd2cebc98b6d514d1dae75a1cf1b266e92aa8c25afed0b19ca420a11283c94badfc5d4b627a6d53095b3303000000000faaa349e0741336d4ed889c32c0872aa2963f07f0ff56f258516a4a000164a5202d8cdc492e66a1a0c289e3f7cfd4d27f19ad2b306443503b25d2920f64447734b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1f}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x2000a0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10f30f9b0186dd", 0x0, 0x4000}, 0x28) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) 03:22:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000005865000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000081000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:45 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x350, 0x60, 0x160, 0x160, 0x0, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0x74}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r4, @ANYRES16=r5], 0x3c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:22:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff000}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000009000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000ffffa888000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1768.865814][T15957] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1768.879416][T15957] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 03:22:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000000000a000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1769.086399][T15957] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1769.104554][T15971] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1769.205820][ T29] audit: type=1800 audit(1596943366.200:1576): pid=15946 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=15747 res=0 03:22:46 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000ffffff9e000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r2}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r2, 0x3}, &(0x7f0000000080)=0x8) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 03:22:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000000000c000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000fffffff0000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:46 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'batadv_slave_0\x00', {0x1}, 0x1000}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2300000025000511d25a80648c63940d0424fc60040018000a001100022f000037153e", 0x23}], 0x1}, 0x0) [ 1769.684102][T16012] validate_nla: 3 callbacks suppressed [ 1769.684113][T16012] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000000000e000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:46 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000007fffffff000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000000000f000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1769.953813][T16038] IPVS: ftp: loaded support on port[0] = 21 [ 1769.978207][T16012] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:47 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000ffffffff000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1770.114384][T16038] virt_wifi0 speed is unknown, defaulting to 1000 03:22:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000010000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1770.454554][T16083] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1770.672536][T16083] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1770.695362][T16044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1770.748100][T16044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.760025][T16044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1770.772587][T16044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.782928][T16044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1770.794010][T16044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.805272][T16044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1770.817271][T16044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.827889][T16044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1770.843343][T16044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1770.855200][T16038] lo speed is unknown, defaulting to 1000 [ 1770.895586][T16044] IPVS: ftp: loaded support on port[0] = 21 [ 1770.904511][T16104] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1770.915062][T16104] CPU: 0 PID: 16104 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 1770.923406][T16104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1770.933483][T16104] Call Trace: [ 1770.936783][T16104] dump_stack+0x18f/0x20d [ 1770.941131][T16104] sysfs_warn_dup.cold+0x1c/0x2d [ 1770.946082][T16104] sysfs_do_create_link_sd+0x11e/0x140 [ 1770.951561][T16104] sysfs_create_link+0x5f/0xc0 [ 1770.956345][T16104] device_add+0x6ff/0x1c40 [ 1770.960779][T16104] ? devlink_add_symlinks+0x450/0x450 [ 1770.966163][T16104] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1770.972159][T16104] wiphy_register+0x1d66/0x2850 [ 1770.977032][T16104] ? wiphy_unregister+0xc10/0xc10 [ 1770.982067][T16104] ? generic_xdp_install+0x700/0x700 [ 1770.987406][T16104] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1770.993486][T16104] ieee80211_register_hw+0x22c9/0x39a0 [ 1770.998968][T16104] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1771.004390][T16104] ? lock_downgrade+0x830/0x830 [ 1771.009252][T16104] ? lock_is_held_type+0xbb/0xf0 [ 1771.014201][T16104] ? memset+0x20/0x40 [ 1771.018189][T16104] ? __hrtimer_init+0x12c/0x260 [ 1771.023054][T16104] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1771.028798][T16104] ? hwsim_virtio_rx_work+0x350/0x350 [ 1771.034179][T16104] ? memcpy+0x39/0x60 [ 1771.038177][T16104] hwsim_new_radio_nl+0x93e/0xf8c [ 1771.043241][T16104] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1771.049506][T16104] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1771.056449][T16104] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1771.063311][T16104] genl_rcv_msg+0x61d/0x980 [ 1771.067832][T16104] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1771.074814][T16104] ? lock_release+0x8e0/0x8e0 [ 1771.079494][T16104] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1771.084785][T16104] netlink_rcv_skb+0x15a/0x430 [ 1771.089557][T16104] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1771.096501][T16104] ? netlink_ack+0xa10/0xa10 [ 1771.101113][T16104] genl_rcv+0x24/0x40 [ 1771.105362][T16104] netlink_unicast+0x533/0x7d0 [ 1771.110139][T16104] ? netlink_attachskb+0x810/0x810 [ 1771.115250][T16104] ? _copy_from_iter_full+0x247/0x890 [ 1771.120625][T16104] ? __phys_addr+0x9a/0x110 [ 1771.125132][T16104] ? __phys_addr_symbol+0x2c/0x70 [ 1771.130252][T16104] ? __check_object_size+0x171/0x3e4 [ 1771.135571][T16104] netlink_sendmsg+0x856/0xd90 [ 1771.140345][T16104] ? netlink_unicast+0x7d0/0x7d0 [ 1771.145298][T16104] ? netlink_unicast+0x7d0/0x7d0 [ 1771.150241][T16104] sock_sendmsg+0xcf/0x120 [ 1771.154663][T16104] ____sys_sendmsg+0x6e8/0x810 [ 1771.160241][T16104] ? kernel_sendmsg+0x50/0x50 [ 1771.164920][T16104] ? do_recvmmsg+0x6d0/0x6d0 [ 1771.169525][T16104] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1771.175529][T16104] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1771.181518][T16104] ? __lock_acquire+0xbb5/0x5640 [ 1771.186464][T16104] ___sys_sendmsg+0xf3/0x170 [ 1771.191059][T16104] ? sendmsg_copy_msghdr+0x160/0x160 [ 1771.196350][T16104] ? __fget_files+0x272/0x400 [ 1771.201036][T16104] ? lock_downgrade+0x830/0x830 [ 1771.205914][T16104] ? find_held_lock+0x2d/0x110 [ 1771.210685][T16104] ? __might_fault+0x11f/0x1d0 [ 1771.215463][T16104] ? __fget_files+0x294/0x400 [ 1771.220156][T16104] ? __fget_light+0xea/0x280 [ 1771.224765][T16104] __sys_sendmsg+0xe5/0x1b0 [ 1771.229276][T16104] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1771.234328][T16104] ? trace_hardirqs_on+0x5f/0x220 [ 1771.239362][T16104] ? lockdep_hardirqs_on+0x76/0xf0 [ 1771.244484][T16104] do_syscall_64+0x2d/0x70 [ 1771.248904][T16104] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1771.254795][T16104] RIP: 0033:0x45ce69 [ 1771.258703][T16104] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1771.278317][T16104] RSP: 002b:00007fa686806c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1771.286739][T16104] RAX: ffffffffffffffda RBX: 000000000002bf00 RCX: 000000000045ce69 [ 1771.294813][T16104] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 1771.302799][T16104] RBP: 000000000118c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1771.310788][T16104] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118c06c [ 1771.318769][T16104] R13: 00007fffdf4aaf5f R14: 00007fa6868079c0 R15: 000000000118c06c [ 1771.535933][T16129] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1771.547144][T16129] CPU: 0 PID: 16129 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 1771.555512][T16129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1771.565574][T16129] Call Trace: [ 1771.568877][T16129] dump_stack+0x18f/0x20d [ 1771.573227][T16129] sysfs_warn_dup.cold+0x1c/0x2d [ 1771.578175][T16129] sysfs_do_create_link_sd+0x11e/0x140 [ 1771.583646][T16129] sysfs_create_link+0x5f/0xc0 [ 1771.588423][T16129] device_add+0x6ff/0x1c40 [ 1771.592861][T16129] ? devlink_add_symlinks+0x450/0x450 [ 1771.598245][T16129] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1771.604242][T16129] wiphy_register+0x1d66/0x2850 [ 1771.609116][T16129] ? wiphy_unregister+0xc10/0xc10 [ 1771.614152][T16129] ? generic_xdp_install+0x700/0x700 [ 1771.619461][T16129] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1771.625545][T16129] ieee80211_register_hw+0x22c9/0x39a0 [ 1771.631027][T16129] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1771.636414][T16129] ? lock_downgrade+0x830/0x830 [ 1771.641278][T16129] ? lock_is_held_type+0xbb/0xf0 [ 1771.646227][T16129] ? memset+0x20/0x40 [ 1771.650238][T16129] ? __hrtimer_init+0x12c/0x260 [ 1771.655098][T16129] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1771.660845][T16129] ? hwsim_virtio_rx_work+0x350/0x350 [ 1771.666227][T16129] ? memcpy+0x39/0x60 [ 1771.670232][T16129] hwsim_new_radio_nl+0x93e/0xf8c [ 1771.675269][T16129] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1771.681225][T16129] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1771.688168][T16129] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1771.695029][T16129] genl_rcv_msg+0x61d/0x980 [ 1771.699544][T16129] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1771.706500][T16129] ? lock_release+0x8e0/0x8e0 [ 1771.711182][T16129] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1771.716476][T16129] netlink_rcv_skb+0x15a/0x430 [ 1771.721277][T16129] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1771.728240][T16129] ? netlink_ack+0xa10/0xa10 [ 1771.732857][T16129] genl_rcv+0x24/0x40 [ 1771.736850][T16129] netlink_unicast+0x533/0x7d0 [ 1771.741626][T16129] ? netlink_attachskb+0x810/0x810 [ 1771.746743][T16129] ? _copy_from_iter_full+0x247/0x890 [ 1771.752120][T16129] ? __phys_addr+0x9a/0x110 [ 1771.756650][T16129] ? __phys_addr_symbol+0x2c/0x70 [ 1771.761683][T16129] ? __check_object_size+0x171/0x3e4 [ 1771.767001][T16129] netlink_sendmsg+0x856/0xd90 [ 1771.771775][T16129] ? netlink_unicast+0x7d0/0x7d0 [ 1771.776751][T16129] ? netlink_unicast+0x7d0/0x7d0 [ 1771.781698][T16129] sock_sendmsg+0xcf/0x120 [ 1771.786123][T16129] ____sys_sendmsg+0x6e8/0x810 [ 1771.790895][T16129] ? kernel_sendmsg+0x50/0x50 [ 1771.795596][T16129] ? do_recvmmsg+0x6d0/0x6d0 [ 1771.800197][T16129] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1771.806209][T16129] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1771.812191][T16129] ? lockdep_hardirqs_on+0x76/0xf0 [ 1771.817312][T16129] ___sys_sendmsg+0xf3/0x170 [ 1771.821915][T16129] ? sendmsg_copy_msghdr+0x160/0x160 [ 1771.827205][T16129] ? __fget_files+0x272/0x400 [ 1771.831893][T16129] ? lock_downgrade+0x830/0x830 [ 1771.836772][T16129] ? find_held_lock+0x2d/0x110 [ 1771.841541][T16129] ? __might_fault+0x11f/0x1d0 [ 1771.846491][T16129] ? __fget_files+0x294/0x400 [ 1771.851180][T16129] ? __fget_light+0xea/0x280 [ 1771.855780][T16129] __sys_sendmsg+0xe5/0x1b0 [ 1771.860285][T16129] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1771.865346][T16129] ? kcov_ioctl+0x192/0x640 [ 1771.869867][T16129] ? trace_hardirqs_on+0x5f/0x220 [ 1771.874900][T16129] ? lockdep_hardirqs_on+0x76/0xf0 [ 1771.880049][T16129] do_syscall_64+0x2d/0x70 [ 1771.884475][T16129] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1771.890370][T16129] RIP: 0033:0x45ce69 [ 1771.894269][T16129] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1771.913901][T16129] RSP: 002b:00007fa686782c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1771.922314][T16129] RAX: ffffffffffffffda RBX: 000000000002bf00 RCX: 000000000045ce69 [ 1771.930286][T16129] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 1771.938351][T16129] RBP: 000000000118c320 R08: 0000000000000000 R09: 0000000000000000 [ 1771.946500][T16129] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118c2ec [ 1771.954473][T16129] R13: 00007fffdf4aaf5f R14: 00007fa6867839c0 R15: 000000000118c2ec 03:22:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000f0ffffffffffff000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:50 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) socket(0x1e, 0x4, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000020000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x3}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000001527000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1774.001390][T16180] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1774.013398][T16181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:22:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000002000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:51 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x18}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000780)=0x55, 0x4) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, r3, 0x300, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x92}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xec}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x5c}}, 0x4004040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x20c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4d7a}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x7, 0x0, 0x80, 0x6}, {0x8001, 0x1, 0x0, 0x505}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x2}}, {0x2, 0x4e23, @remote}, {0x2, 0x4000, @multicast1}, 0xd3c6b85bf6ebad7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc}) sendfile(r1, r4, 0x0, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000500) 03:22:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000040000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1774.282043][T16180] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:51 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000003000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4, 0xb}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000060000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1774.548040][ T29] audit: type=1804 audit(1596943371.540:1577): pid=16221 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1894/cgroup.controllers" dev="sda1" ino=16365 res=1 03:22:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000004000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:51 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:51 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x3, 0x6, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000005865000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:51 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1774.882194][T16254] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1774.954961][T16259] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000005000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000080000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0xb, @in6_addr=@loopback}]}, 0x30}}, 0x0) 03:22:52 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r1 = socket(0xa, 0x1, 0x0) close(r1) sendmmsg$inet_sctp(r1, &(0x7f0000000a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYRES32=0x0], 0x30, 0x1}], 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000940)=ANY=[@ANYRES32=r1, @ANYBLOB="bc1b687098bc176b6fc456e26b6ceec741c289242b7414edcaf753f8f1c344832f27d97ace4a4159534b0213481e33fc5eb0987d5d6dc019725d9f9ceec8e3e7f7ddea45de6b7bd6be6d8274bc1750ed67f89e42578da5c821b47bdf543bb90ef13fb5ad63c6126c99474b8dabb3e80bdffaee921127773c0cd407b2665848d73c2200cae2cbea364137fcddc9ec15821d45cf185cdc7f21ec69d468028469d7dee0", @ANYRESOCT], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="c4b9b4b5f2"], 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x7c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="0c96fadfe67d576a000000e4ff00", 0x0, 0x3, 0x0, 0xfffffc7a, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x100009}, 0x3c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x100000000000000c, 0x4, 0x8000000000004, 0x1, 0x0, r4}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x100000000000000c, 0x4, 0x8000000000004, 0x1, 0x0, r5}, 0x3c) r6 = socket(0x9, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000380), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000880)=0x4) socket$netlink(0x10, 0x3, 0x15) connect$nfc_llcp(r6, &(0x7f0000000780)={0x27, 0x0, 0x2, 0x0, 0x1, 0x1, "492f32a329f5be5e9f2cf6add75ef9a535fe9b128b96fb145722c01b3dcf014a434315b16a37da37df7746e36af26b91a270dc021d97081c45d93fa7317d35", 0x35}, 0x60) r8 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)={0x14, 0x7, 0xa, 0x6, 0x4c6, r9, 0xd9, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4003}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r11, 0x28, &(0x7f00000000c0)}, 0x10) socketpair(0x26, 0x805, 0x1, &(0x7f0000000a80)) accept4$rose(r6, &(0x7f0000000ac0)=@full={0xb, @remote, @bcast, 0x0, [@null, @default, @rose, @bcast, @remote, @default]}, &(0x7f0000000b40)=0x40, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x3f}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x54}}, 0x20000040) 03:22:52 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000006000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1775.232979][T16259] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0xc, @in6_addr=@loopback}]}, 0x30}}, 0x0) [ 1775.295440][T16286] device geneve4 entered promiscuous mode [ 1775.327137][ T29] audit: type=1800 audit(1596943372.320:1578): pid=16266 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=16364 res=0 03:22:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000081000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:52 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000007000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x2}}]}, 0x30}}, 0x0) 03:22:52 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000005060000000f000000000003f4ffffff74000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a5800809affff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r3}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e24, 0x8, @ipv4={[], [], @broadcast}, 0x1}}}, 0x84) write$cgroup_subtree(r0, &(0x7f00000002c0)={[{0x2b, 'pids'}, {0x2b, 'io'}, {0x2d, 'pids'}, {0x2b, 'rdma'}]}, 0x16) 03:22:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x3}}]}, 0x30}}, 0x0) [ 1776.021046][T16338] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:53 executing program 2: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000008000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000ffffa888000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1776.119410][ T29] audit: type=1804 audit(1596943373.110:1579): pid=16337 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1896/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 1776.274588][T16338] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x4}}]}, 0x30}}, 0x0) 03:22:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1776.438375][ T29] audit: type=1804 audit(1596943373.430:1580): pid=16345 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1896/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 1776.521193][ T29] audit: type=1804 audit(1596943373.430:1581): pid=16337 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1896/cgroup.controllers" dev="sda1" ino=16363 res=1 03:22:53 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000ffffff9e000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000009000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x5}}]}, 0x30}}, 0x0) 03:22:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0xfffffffffffffcd1) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='freezer.state\x00', 0xb00000000065808, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) 03:22:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000fffffff0000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1776.727812][T16407] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000a000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x6}}]}, 0x30}}, 0x0) 03:22:53 executing program 3: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) pipe(&(0x7f0000002b80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000100)={0x2, 'bridge_slave_0\x00', {0x4}, 0x3ff0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r5, 0x0, 0x100000}, 0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002bc0)={r5, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f0000002c80)=0x84) socket$netlink(0x10, 0x3, 0x0) 03:22:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000007fffffff000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1777.003291][T16407] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1777.127257][T16444] IPVS: ftp: loaded support on port[0] = 21 [ 1777.204201][T16444] virt_wifi0 speed is unknown, defaulting to 1000 03:22:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000c000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x8}}]}, 0x30}}, 0x0) 03:22:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000ffffffff000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x9}}]}, 0x30}}, 0x0) 03:22:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000e000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000f0ffffffffffff000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1777.489717][T16482] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1777.732507][T16482] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1777.937685][T16444] lo speed is unknown, defaulting to 1000 [ 1777.986935][T16457] IPVS: ftp: loaded support on port[0] = 21 [ 1778.029051][T16457] virt_wifi0 speed is unknown, defaulting to 1000 [ 1778.364784][ T7] tipc: TX() has been purged, node left! [ 1778.384732][T16457] lo speed is unknown, defaulting to 1000 03:22:55 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="17936095fd55", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@can}}, 0x0) 03:22:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000002000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xa}}]}, 0x30}}, 0x0) 03:22:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000f000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1778.704068][T16592] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000010000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xc}}]}, 0x30}}, 0x0) 03:22:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000003000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:55 executing program 3: socket$inet6(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ppoll(&(0x7f0000000000)=[{r2, 0x440}, {r0, 0x4}, {r3, 0x200}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={[0x5]}, 0x8) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000e) 03:22:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000004000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1778.953963][T16592] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000060000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xe}}]}, 0x30}}, 0x0) 03:22:56 executing program 3: syz_emit_ethernet(0x29d, &(0x7f00000000c0)={@local, @empty=[0x2], @void, {@ipv4={0x800, @gre={{0x1c, 0x4, 0x1, 0x3f, 0x28f, 0x65, 0x0, 0x5, 0x2f, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x1c, 0xd6, 0x0, 0x4, [0x80000001, 0x8902, 0x699, 0x1, 0xa90f, 0x0]}, @cipso={0x86, 0x12, 0x1, [{0x6, 0x8, "26466b02e9d8"}, {0x2, 0x4, "e8f7"}]}, @lsrr={0x83, 0x1b, 0xd3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010100, @private=0xa010102]}, @ssrr={0x89, 0x7, 0xa8, [@local]}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x6, "c9de6559"}, @end]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1c, 0x0, [0x0], "32d4f55e016218cae9c87d855b1a2595e57f68a160cc05d6c9dbdafb"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "74bd839bb4ca05ba4e081c68609459e105abd71f31ad9812aeffb83c535500a25570e038f6742452d26c72a9e862c9b5ca0f1c2d82881efa1090c8296cef65300aa2d2d07c2d967e77c3d8f92d80a3e0747a4a5da92553126aefc7cbff76e903259ce93556882e19fab164f8a028ab20ddb890cdf1c3cecbd57520913f8e71a544bf96c88eaea3e6f6968379a7ba7a469f9049269b1466ef60c7cad7999ec42a48ec270af02150312e79f5c3c13982daeca3ef855f9fda1732d5e55bbb1f3b2b375a6ac37c76d7009214a2e522405538f5d808efebe48233ba8dcea763de555f4d6fe4ecb9f43a1ec9c997ebc0deca8a11bdf4ac0ccb61886ec1"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "1d747675a48cdcbfeb73ab0a50702b5f8ec9cd8141a39589bf1c9c74aff2589cb1e31921b94f0d185901e0a658c0f8896005885195aa"}, {0x8, 0x88be, 0x1, {{0x3, 0x1, 0x5, 0x1, 0x1, 0x1, 0x5, 0x8}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x8, 0x2, 0x1, 0x0, 0x7, 0x20}, 0x2, {0x9, 0xffff, 0x1, 0x19, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "9ba3769c9afd488e5d6c3862b61de1eb08a297989cc3ce2f771c7d1230cc39dd84c3c8495661d312b8423faf1eb25958a1c5e7cc1069baca087b8b9e82fe1397f600df6217e48bf53d7f8e3c7745ab5f38fa3b2998f9fcb4e0128efea94e0716a57961d6b430aafba277a0a4f8a18a0564f1354d73c146c899895bb0d91d2fcabb815349f1376d952eb4cde8d0"}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/mnt\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) recvfrom$inet6(r2, &(0x7f0000000000)=""/8, 0x8, 0x101, 0x0, 0x0) 03:22:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000005000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xf}}]}, 0x30}}, 0x0) 03:22:56 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000f0000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000006000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x10}}]}, 0x30}}, 0x0) 03:22:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010003b0e0000000000000000000100003b04a656665829e335e24995e3094958d445d4f0e44c4f20230d3add2e64a3ab4edaefee", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007866726d0000000038000280"], 0x34}}, 0x0) [ 1779.633678][T16689] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 03:22:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x60}}]}, 0x30}}, 0x0) 03:22:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000030000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000007000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="d9050000", @ANYRES16=r1, @ANYBLOB="03100004000000050002010000"], 0x28}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x18c}]}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x8c4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000041) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) [ 1779.776572][ T29] audit: type=1800 audit(1596943376.770:1582): pid=16701 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=16335 res=0 03:22:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xf0}}]}, 0x30}}, 0x0) 03:22:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000050000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:56 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) [ 1780.116846][T16729] validate_nla: 2 callbacks suppressed [ 1780.116857][T16729] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1780.304732][T16729] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1780.378704][ T29] audit: type=1800 audit(1596943377.370:1583): pid=16754 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=16198 res=0 03:22:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000008000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="9537b12e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)=0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="b55cb12e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000380)='illinois\x00', 0x9) r7 = socket(0xa, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000180)={0x92de, 0x2, 0x2, 0x9, 0x2, [{0x8000, 0x5e93, 0x3f22effb, [], 0x101}, {0x4, 0xfffffffffffffff8, 0x5, [], 0x2}]}) r8 = socket(0x400020000000010, 0x2, 0x0) write(r8, &(0x7f0000000100)="1f00000013000d0000000000fc07ff1b070304000d00000007000108010039", 0x1f) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="00042dbd7000fbdbdf2510000000050035008300000008000300", @ANYRES32=0x0, @ANYBLOB="08003c006f00000008002b0001010000080032000600000005003000010000000500330001000000050030000000000005003000010000008f8e1672bb6266902430ad0875cbbe6e019555952867f051c2b9a605049b717fdae5cf66b3ffb9f8220dfd74832ff319a8c6aeae4d0888c62dc70a34a02de02eb1fc8cd59f73ffa6da37e6f23e8975373f79c1442109c1b45e7b8febc933ec98cb425dc54696f4d679b82c49b4cf33057dd8b7c3822ebdea03b3652e4e950091dc7c38799ff4a668500121f100b75889f4a730ce5feaaa5d3c9b9d9376498faa48ad", @ANYBLOB, @ANYRES64, @ANYRES32=r8, @ANYRESOCT], 0x9}, 0x1, 0x0, 0x0, 0x21}, 0x20008080) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'lblcr\x00', 0x20, 0x0, 0x5f}, 0x2c) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r6, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000080)=0x20) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x4, 0x4) 03:22:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000060000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x300}}]}, 0x30}}, 0x0) 03:22:57 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000009000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x500}}]}, 0x30}}, 0x0) 03:22:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000090000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1780.670653][T16784] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:22:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000a000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x600}}]}, 0x30}}, 0x0) 03:22:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000a0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1780.915295][T16784] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000c000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x8ee}}]}, 0x30}}, 0x0) 03:22:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000c0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) 03:22:58 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) [ 1781.537195][T16855] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) 03:22:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000e000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000e0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x900}}]}, 0x30}}, 0x0) [ 1781.739340][T16857] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 03:22:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000f0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xa00}}]}, 0x30}}, 0x0) [ 1781.877208][T16855] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000f000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) 03:22:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xc00}}]}, 0x30}}, 0x0) 03:22:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000027140000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:22:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 03:22:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000014270000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1782.306242][T16942] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 03:22:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000010000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xe00}}]}, 0x30}}, 0x0) [ 1782.404277][T16943] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 03:22:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000060000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1782.698084][T16943] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:22:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000003f0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xf00}}]}, 0x30}}, 0x0) 03:22:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000f0000000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:22:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 03:22:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000023002908000000000021000003000000a9513f6effd6c839132900e3df44397e2d9a8e63fd6c200a331b6124f22437697ed2e53aa435f425a78df8d32bf4fcc32938c7cd037506616c8e9458580a90b4568df058ba2b5fa1181a6948ff26351606d478faef05d329113e16a512eea43a676a1f9d420813bd146856c33855c1d202e0b0095ee1040b2094214f6987fae7"], 0x14}, 0x1, 0x60}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', r6}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100), 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x13c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 03:23:00 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x3f00}}]}, 0x30}}, 0x0) 03:23:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000030000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}]}, &(0x7f0000000180)=0x10) 03:23:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000065580000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}]}, &(0x7f0000000180)=0x10) 03:23:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000050000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000600000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x5865}}]}, 0x30}}, 0x0) 03:23:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000000440)=""/201, 0xc9}, {&(0x7f0000000540)=""/192, 0xc0}], 0x3, &(0x7f0000000600)=""/182, 0xb6}, 0x2000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="000000000000000008000000090001007273767000000000340002002000040000000000000000000000000000000000000000000000000000000700080002"], 0x64}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 03:23:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000060000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000058650000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1783.795177][T17159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:23:00 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}]}, &(0x7f0000000180)=0x10) 03:23:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x6000}}]}, 0x30}}, 0x0) 03:23:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000090000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1783.860492][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1783.889273][T17166] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:23:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000810000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1783.916770][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1783.976110][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:23:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x6558}}]}, 0x30}}, 0x0) 03:23:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000a0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0xc280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x801}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$TUNGETVNETHDRSZ(r0, 0x800454e1, 0x0) close(r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r3}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)={r3, 0x3d44, 0x4, [0x3, 0xff7e, 0x2, 0x2]}, &(0x7f0000000080)=0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc_llcp, &(0x7f0000000380)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000240)=0x4) 03:23:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000f00000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000c0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x8100}}]}, 0x30}}, 0x0) 03:23:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000400300000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:01 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="edff625b36dd2f5e31032c0593c4b5f39e997a3a00651233caf61b1ef96e3a9629185c6ce7c54a5ecc32045016ef9c03"], 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="d8910bd38cef94445d4296d50656b74028371b312d9c61263813b5b7881a0d96c0121a70d8faae08431964541ca9fc7c7506f3ba", @ANYRES16=0x0, @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f00000016c0)={0x44, 0x0, 0x8e6767b8eef245b5, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 03:23:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000e0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000f0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xee08}}]}, 0x30}}, 0x0) 03:23:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000034000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000027150000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1784.876111][ T7] tipc: TX() has been purged, node left! 03:23:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000fffff000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:02 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xf000}}]}, 0x30}}, 0x0) 03:23:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bfd400008331dd2e0eabb604c311975256d31b86bd51975e0eff2be7aa891942f9f8f3ca753d200bb1be253a08f7642d3c0c", @ANYRES16=r3, @ANYBLOB="ff01010000e8bbd11f1284ed0000000000", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 03:23:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000200000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000001000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x34000}}]}, 0x30}}, 0x0) 03:23:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000002000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1785.383948][ T29] audit: type=1804 audit(1596943382.380:1584): pid=17318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1911/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 1785.423980][T17322] validate_nla: 10 callbacks suppressed 03:23:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000015270000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1785.423990][T17322] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x0, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000003000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1785.754014][T17322] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x400300}}]}, 0x30}}, 0x0) [ 1785.952081][T17322] ieee80211 phy1365: Failed to add default virtual iface 03:23:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x0, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000400000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:03 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000004000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x2}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000040)=0x3) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5602067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000005000000", 0x58}], 0x1) 03:23:03 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000005000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1786.156847][T17390] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xf0ffff}}]}, 0x30}}, 0x0) 03:23:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000065580000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x0, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:03 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000006000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x1000000}}]}, 0x30}}, 0x0) [ 1786.412753][T17390] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000600000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x2000000}}]}, 0x30}}, 0x0) 03:23:03 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000007000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1786.853153][T17454] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x44}}, 0x0) 03:23:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000058650000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:03 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000008000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x3000000}}]}, 0x30}}, 0x0) 03:23:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000009000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1787.098375][T17454] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000810000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x4000000}}]}, 0x30}}, 0x0) 03:23:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000a000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000f00000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040), 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, {0x1, @broadcast}, 0x52, {0x2, 0x4e23, @private=0xa010100}, 'gre0\x00'}) 03:23:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, 0x0) 03:23:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x5000000}}]}, 0x30}}, 0x0) 03:23:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000400300000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000c000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1787.533343][T17519] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0005000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="001100000000000004000a000a000100726f757465000000140002000800030000000000080002"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) accept$packet(r4, 0x0, &(0x7f00000000c0)) 03:23:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000034000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1787.808005][T17519] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1787.856521][T17557] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1787.934265][T17557] device veth105 entered promiscuous mode [ 1787.963131][T17570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:23:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, 0x0) 03:23:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000e000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000fffff000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x6000000}}]}, 0x30}}, 0x0) 03:23:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000027c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003000)=ANY=[@ANYBLOB="2c0000000b06010223000000000016000000000005000100f90000000900020073007a300000000004000780"], 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x36, 0x40, 0x520b, 0x5, @empty, @dev={0xfe, 0x80, [], 0xe}, 0x7800, 0x8, 0x8, 0xfe6}}) r6 = socket(0x3, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x2}}]}, 0x68}}, 0x4004040) 03:23:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000001000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000f000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1788.285841][T17594] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1788.307219][ T29] audit: type=1804 audit(1596943385.300:1585): pid=17590 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1916/cgroup.controllers" dev="sda1" ino=16371 res=1 03:23:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, 0x0) 03:23:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x8000000}}]}, 0x30}}, 0x0) 03:23:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000002000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:05 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1788.546400][T17594] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1788.708956][T17638] FAULT_INJECTION: forcing a failure. [ 1788.708956][T17638] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.764802][T17638] CPU: 0 PID: 17638 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1788.773159][T17638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1788.783348][T17638] Call Trace: [ 1788.786641][T17638] dump_stack+0x18f/0x20d [ 1788.790984][T17638] should_fail.cold+0x5/0x14 [ 1788.795640][T17638] ? sctp_getsockopt+0x169b/0x6d0a [ 1788.800759][T17638] ? sctp_getsockopt+0x169b/0x6d0a [ 1788.805871][T17638] should_failslab+0x5/0xf [ 1788.810291][T17638] __kmalloc_track_caller+0x27b/0x330 [ 1788.815659][T17638] ? __might_fault+0x190/0x1d0 [ 1788.820431][T17638] memdup_user+0x22/0xd0 [ 1788.824673][T17638] sctp_getsockopt+0x169b/0x6d0a [ 1788.829620][T17638] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1788.835861][T17638] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1788.841840][T17638] ? _parse_integer+0x132/0x180 [ 1788.846694][T17638] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1788.852680][T17638] ? lock_acquire+0x1f1/0xad0 [ 1788.857358][T17638] ? do_dup2+0x520/0x520 [ 1788.861609][T17638] ? __fget_files+0x272/0x400 [ 1788.866298][T17638] ? lock_is_held_type+0xbb/0xf0 [ 1788.871233][T17638] ? lock_downgrade+0x830/0x830 [ 1788.876107][T17638] ? aa_sk_perm+0x316/0xaa0 [ 1788.880612][T17638] ? aa_af_perm+0x230/0x230 [ 1788.885147][T17638] ? sock_def_destruct+0x10/0x10 [ 1788.890080][T17638] __sys_getsockopt+0x219/0x4c0 [ 1788.894932][T17638] ? vfs_write+0x1b0/0x6b0 [ 1788.899346][T17638] ? __ia32_sys_setsockopt+0x150/0x150 [ 1788.904803][T17638] ? fput_many+0x2f/0x1a0 [ 1788.909138][T17638] ? syscall_enter_from_user_mode+0x20/0x290 [ 1788.915138][T17638] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1788.921120][T17638] __x64_sys_getsockopt+0xba/0x150 [ 1788.926272][T17638] ? syscall_enter_from_user_mode+0x20/0x290 [ 1788.932272][T17638] do_syscall_64+0x2d/0x70 [ 1788.936686][T17638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1788.942581][T17638] RIP: 0033:0x45ce69 [ 1788.946473][T17638] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1788.966074][T17638] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1788.974484][T17638] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1788.982449][T17638] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1788.990415][T17638] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1788.998396][T17638] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1789.006378][T17638] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:06 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000010000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x9000000}}]}, 0x30}}, 0x0) 03:23:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000003000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:06 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x180000000000000a) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008001300", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r4, 0x12) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=@fragment, 0x8) sendmmsg(r0, &(0x7f00000002c0), 0x4000139, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x90) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 03:23:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xa000000}}]}, 0x30}}, 0x0) 03:23:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000001427000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000004000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfe6dba", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 03:23:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000003f000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000005000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:06 executing program 2 (fault-call:2 fault-nth:1): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1789.652941][T17710] FAULT_INJECTION: forcing a failure. [ 1789.652941][T17710] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.665995][T17710] CPU: 1 PID: 17710 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1789.674324][T17710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1789.684407][T17710] Call Trace: [ 1789.687703][T17710] dump_stack+0x18f/0x20d [ 1789.692044][T17710] should_fail.cold+0x5/0x14 [ 1789.696659][T17710] ? rwlock_bug.part.0+0x90/0x90 [ 1789.701605][T17710] should_failslab+0x5/0xf [ 1789.706023][T17710] kmem_cache_alloc+0x40/0x3b0 [ 1789.710801][T17710] sctp_get_port_local+0x3ec/0x1410 [ 1789.716009][T17710] ? get_order+0x20/0x20 [ 1789.720310][T17710] ? __ipv6_addr_type+0x20d/0x330 [ 1789.725349][T17710] ? sctp_bind_addr_match+0x1d5/0x2c0 [ 1789.730733][T17710] sctp_do_bind+0x208/0x5c0 [ 1789.735264][T17710] ? memset+0x20/0x40 [ 1789.739248][T17710] sctp_connect_new_asoc+0x59e/0x770 [ 1789.744536][T17710] ? sctp_bind+0xd0/0xd0 [ 1789.748798][T17710] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1789.754751][T17710] ? sctp_get_af_specific+0x51/0x60 [ 1789.759958][T17710] __sctp_connect+0x3e2/0xc00 [ 1789.764652][T17710] ? sctp_connect_new_asoc+0x770/0x770 [ 1789.770145][T17710] ? security_sctp_bind_connect+0x8f/0xc0 [ 1789.775878][T17710] __sctp_setsockopt_connectx+0xfa/0x140 [ 1789.781520][T17710] sctp_getsockopt+0x16dc/0x6d0a [ 1789.786467][T17710] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1789.792713][T17710] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1789.799216][T17710] ? _parse_integer+0x132/0x180 [ 1789.804079][T17710] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1789.810067][T17710] ? lock_acquire+0x1f1/0xad0 [ 1789.814744][T17710] ? do_dup2+0x520/0x520 [ 1789.818988][T17710] ? __fget_files+0x272/0x400 [ 1789.823668][T17710] ? lock_is_held_type+0xbb/0xf0 [ 1789.828632][T17710] ? lock_downgrade+0x830/0x830 [ 1789.833492][T17710] ? aa_sk_perm+0x316/0xaa0 [ 1789.838000][T17710] ? aa_af_perm+0x230/0x230 [ 1789.842518][T17710] ? sock_def_destruct+0x10/0x10 [ 1789.847451][T17710] __sys_getsockopt+0x219/0x4c0 [ 1789.852307][T17710] ? vfs_write+0x1b0/0x6b0 [ 1789.856729][T17710] ? __ia32_sys_setsockopt+0x150/0x150 [ 1789.862194][T17710] ? fput_many+0x2f/0x1a0 [ 1789.866529][T17710] ? syscall_enter_from_user_mode+0x20/0x290 [ 1789.872514][T17710] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1789.878502][T17710] __x64_sys_getsockopt+0xba/0x150 [ 1789.883972][T17710] ? syscall_enter_from_user_mode+0x20/0x290 [ 1789.889960][T17710] do_syscall_64+0x2d/0x70 [ 1789.894553][T17710] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1789.900446][T17710] RIP: 0033:0x45ce69 [ 1789.904342][T17710] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1789.923968][T17710] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1789.932385][T17710] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1789.940358][T17710] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1789.948351][T17710] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1789.956345][T17710] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 1789.964327][T17710] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xc000000}}]}, 0x30}}, 0x0) 03:23:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000006000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x6}, 0x8) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x10001}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x19, 0x0, &(0x7f00000000c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r1, 0x0, 0x100000001) 03:23:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000060000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000007000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1790.174768][ T29] audit: type=1804 audit(1596943387.170:1586): pid=17721 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1919/cgroup.controllers" dev="sda1" ino=16305 res=1 03:23:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000005865000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xe000000}}]}, 0x30}}, 0x0) 03:23:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xf000000}}]}, 0x30}}, 0x0) 03:23:07 executing program 2 (fault-call:2 fault-nth:2): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1790.475570][T17792] FAULT_INJECTION: forcing a failure. [ 1790.475570][T17792] name failslab, interval 1, probability 0, space 0, times 0 03:23:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000008000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1790.556849][T17792] CPU: 1 PID: 17792 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1790.565188][T17792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.575231][T17792] Call Trace: [ 1790.578518][T17792] dump_stack+0x18f/0x20d [ 1790.582846][T17792] should_fail.cold+0x5/0x14 [ 1790.587435][T17792] should_failslab+0x5/0xf [ 1790.591848][T17792] kmem_cache_alloc_trace+0x47/0x2d0 [ 1790.597130][T17792] sctp_add_bind_addr+0x8c/0x370 [ 1790.602082][T17792] sctp_do_bind+0x2f0/0x5c0 [ 1790.606581][T17792] ? memset+0x20/0x40 [ 1790.610565][T17792] sctp_connect_new_asoc+0x59e/0x770 [ 1790.615843][T17792] ? sctp_bind+0xd0/0xd0 [ 1790.620084][T17792] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1790.625970][T17792] ? sctp_get_af_specific+0x51/0x60 [ 1790.631164][T17792] __sctp_connect+0x3e2/0xc00 [ 1790.635842][T17792] ? sctp_connect_new_asoc+0x770/0x770 [ 1790.641302][T17792] ? security_sctp_bind_connect+0x8f/0xc0 [ 1790.647027][T17792] __sctp_setsockopt_connectx+0xfa/0x140 [ 1790.652655][T17792] sctp_getsockopt+0x16dc/0x6d0a [ 1790.657592][T17792] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1790.663832][T17792] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1790.669808][T17792] ? _parse_integer+0x132/0x180 [ 1790.674672][T17792] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1790.680666][T17792] ? lock_acquire+0x1f1/0xad0 [ 1790.685338][T17792] ? do_dup2+0x520/0x520 [ 1790.689579][T17792] ? __fget_files+0x272/0x400 [ 1790.694252][T17792] ? lock_is_held_type+0xbb/0xf0 [ 1790.699179][T17792] ? lock_downgrade+0x830/0x830 [ 1790.704027][T17792] ? aa_sk_perm+0x316/0xaa0 [ 1790.708521][T17792] ? aa_af_perm+0x230/0x230 [ 1790.713030][T17792] ? sock_def_destruct+0x10/0x10 [ 1790.717954][T17792] __sys_getsockopt+0x219/0x4c0 [ 1790.722809][T17792] ? vfs_write+0x1b0/0x6b0 [ 1790.727215][T17792] ? __ia32_sys_setsockopt+0x150/0x150 [ 1790.732665][T17792] ? fput_many+0x2f/0x1a0 [ 1790.736987][T17792] ? syscall_enter_from_user_mode+0x20/0x290 [ 1790.742968][T17792] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1790.748943][T17792] __x64_sys_getsockopt+0xba/0x150 [ 1790.754050][T17792] ? syscall_enter_from_user_mode+0x20/0x290 [ 1790.760022][T17792] do_syscall_64+0x2d/0x70 [ 1790.764446][T17792] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1790.770326][T17792] RIP: 0033:0x45ce69 [ 1790.774219][T17792] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1790.793810][T17792] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 03:23:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000081000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1790.802213][T17792] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1790.810191][T17792] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1790.818150][T17792] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1790.826112][T17792] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 1790.834088][T17792] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c [ 1790.920564][ T29] audit: type=1804 audit(1596943387.920:1587): pid=17806 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1919/cgroup.controllers" dev="sda1" ino=16305 res=1 03:23:08 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x10000000}}]}, 0x30}}, 0x0) 03:23:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000009000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:08 executing program 3: unshare(0x40000000) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) read(r0, &(0x7f0000000180)=""/104, 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000280)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x114, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6b1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffcdc}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7c2}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x24004001) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x60, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote, 0x80000001}}}}]}]}, 0x60}}, 0x0) 03:23:08 executing program 2 (fault-call:2 fault-nth:3): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000ffffa888000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x3f000000}}]}, 0x30}}, 0x0) [ 1791.270221][T17827] validate_nla: 5 callbacks suppressed [ 1791.270231][T17827] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1791.332798][T17828] FAULT_INJECTION: forcing a failure. [ 1791.332798][T17828] name failslab, interval 1, probability 0, space 0, times 0 [ 1791.342028][T17832] IPVS: ftp: loaded support on port[0] = 21 03:23:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x60000000}}]}, 0x30}}, 0x0) [ 1791.424124][T17828] CPU: 0 PID: 17828 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1791.432470][T17828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1791.442529][T17828] Call Trace: [ 1791.445825][T17828] dump_stack+0x18f/0x20d [ 1791.450163][T17828] should_fail.cold+0x5/0x14 [ 1791.454791][T17828] should_failslab+0x5/0xf [ 1791.459212][T17828] kmem_cache_alloc_trace+0x240/0x2d0 [ 1791.464612][T17828] sctp_association_new+0x8a/0x2050 [ 1791.469813][T17828] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1791.475713][T17828] ? sctp_v4_scope+0x170/0x190 [ 1791.480488][T17828] sctp_connect_new_asoc+0x1ac/0x770 [ 1791.485778][T17828] ? sctp_bind+0xd0/0xd0 [ 1791.490030][T17828] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1791.495932][T17828] ? sctp_get_af_specific+0x51/0x60 [ 1791.501142][T17828] __sctp_connect+0x3e2/0xc00 [ 1791.505836][T17828] ? sctp_connect_new_asoc+0x770/0x770 [ 1791.511310][T17828] ? security_sctp_bind_connect+0x8f/0xc0 [ 1791.517038][T17828] __sctp_setsockopt_connectx+0xfa/0x140 [ 1791.522678][T17828] sctp_getsockopt+0x16dc/0x6d0a [ 1791.527629][T17828] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1791.533875][T17828] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1791.539863][T17828] ? _parse_integer+0x132/0x180 [ 1791.544729][T17828] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1791.550726][T17828] ? lock_acquire+0x1f1/0xad0 [ 1791.555411][T17828] ? do_dup2+0x520/0x520 [ 1791.559658][T17828] ? __fget_files+0x272/0x400 [ 1791.564349][T17828] ? lock_is_held_type+0xbb/0xf0 [ 1791.569289][T17828] ? lock_downgrade+0x830/0x830 [ 1791.574146][T17828] ? aa_sk_perm+0x316/0xaa0 [ 1791.578652][T17828] ? aa_af_perm+0x230/0x230 [ 1791.583181][T17828] ? sock_def_destruct+0x10/0x10 [ 1791.588115][T17828] __sys_getsockopt+0x219/0x4c0 [ 1791.592975][T17828] ? vfs_write+0x1b0/0x6b0 [ 1791.597395][T17828] ? __ia32_sys_setsockopt+0x150/0x150 [ 1791.602852][T17828] ? fput_many+0x2f/0x1a0 [ 1791.607185][T17828] ? syscall_enter_from_user_mode+0x20/0x290 [ 1791.613170][T17828] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1791.619150][T17828] __x64_sys_getsockopt+0xba/0x150 [ 1791.624284][T17828] ? syscall_enter_from_user_mode+0x20/0x290 [ 1791.630265][T17828] do_syscall_64+0x2d/0x70 [ 1791.634680][T17828] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1791.640572][T17828] RIP: 0033:0x45ce69 [ 1791.644468][T17828] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1791.664093][T17828] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 03:23:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000a000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000ffffff9e000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1791.672503][T17828] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1791.680477][T17828] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1791.688450][T17828] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1791.696417][T17828] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000003 [ 1791.704388][T17828] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x65580000}}]}, 0x30}}, 0x0) [ 1791.787028][T17835] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:23:08 executing program 2 (fault-call:2 fault-nth:4): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1791.948546][T17832] virt_wifi0 speed is unknown, defaulting to 1000 [ 1792.020314][T17827] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1792.044853][T17903] FAULT_INJECTION: forcing a failure. [ 1792.044853][T17903] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1792.058054][T17903] CPU: 1 PID: 17903 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1792.066370][T17903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1792.076421][T17903] Call Trace: [ 1792.079716][T17903] dump_stack+0x18f/0x20d [ 1792.084050][T17903] should_fail.cold+0x5/0x14 [ 1792.088648][T17903] __alloc_pages_nodemask+0x1a3/0x930 [ 1792.094027][T17903] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1792.100019][T17903] ? __alloc_pages_slowpath.constprop.0+0x27a0/0x27a0 [ 1792.106784][T17903] ? mark_held_locks+0x9f/0xe0 [ 1792.107498][T17835] IPVS: ftp: loaded support on port[0] = 21 [ 1792.111554][T17903] ? lock_acquire+0x1f1/0xad0 [ 1792.111576][T17903] ? fs_reclaim_acquire+0xf/0x40 [ 1792.111595][T17903] ? find_held_lock+0x2d/0x110 [ 1792.111616][T17903] cache_grow_begin+0x8c/0xb20 [ 1792.111633][T17903] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1792.111653][T17903] cache_alloc_refill+0x27b/0x340 [ 1792.111669][T17903] ? lockdep_hardirqs_off+0x89/0xc0 [ 1792.111693][T17903] kmem_cache_alloc_trace+0x2bd/0x2d0 [ 1792.157635][T17903] sctp_association_new+0x8a/0x2050 [ 1792.162836][T17903] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1792.168747][T17903] ? sctp_v4_scope+0x170/0x190 [ 1792.173520][T17903] sctp_connect_new_asoc+0x1ac/0x770 [ 1792.178807][T17903] ? sctp_bind+0xd0/0xd0 [ 1792.183081][T17903] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1792.188998][T17903] ? sctp_get_af_specific+0x51/0x60 [ 1792.194199][T17903] __sctp_connect+0x3e2/0xc00 [ 1792.198884][T17903] ? sctp_connect_new_asoc+0x770/0x770 [ 1792.204352][T17903] ? security_sctp_bind_connect+0x8f/0xc0 [ 1792.210074][T17903] __sctp_setsockopt_connectx+0xfa/0x140 [ 1792.215712][T17903] sctp_getsockopt+0x16dc/0x6d0a [ 1792.220660][T17903] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1792.226902][T17903] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1792.232876][T17903] ? _parse_integer+0x132/0x180 [ 1792.237726][T17903] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1792.243709][T17903] ? lock_acquire+0x1f1/0xad0 [ 1792.248391][T17903] ? do_dup2+0x520/0x520 [ 1792.252636][T17903] ? __fget_files+0x272/0x400 [ 1792.257327][T17903] ? lock_is_held_type+0xbb/0xf0 [ 1792.262265][T17903] ? lock_downgrade+0x830/0x830 [ 1792.267134][T17903] ? aa_sk_perm+0x316/0xaa0 [ 1792.271666][T17903] ? aa_af_perm+0x230/0x230 [ 1792.276207][T17903] ? sock_def_destruct+0x10/0x10 [ 1792.281142][T17903] __sys_getsockopt+0x219/0x4c0 [ 1792.285996][T17903] ? vfs_write+0x1b0/0x6b0 [ 1792.290414][T17903] ? __ia32_sys_setsockopt+0x150/0x150 [ 1792.295870][T17903] ? fput_many+0x2f/0x1a0 [ 1792.300212][T17903] ? syscall_enter_from_user_mode+0x20/0x290 [ 1792.306190][T17903] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1792.312174][T17903] __x64_sys_getsockopt+0xba/0x150 [ 1792.317303][T17903] ? syscall_enter_from_user_mode+0x20/0x290 [ 1792.323285][T17903] do_syscall_64+0x2d/0x70 [ 1792.327710][T17903] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1792.333598][T17903] RIP: 0033:0x45ce69 [ 1792.337495][T17903] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1792.357097][T17903] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1792.365507][T17903] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1792.373477][T17903] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1792.381447][T17903] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1792.389421][T17903] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000004 [ 1792.397393][T17903] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000c000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000fffffff0000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1792.662550][T17937] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1792.882509][T17937] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1792.945421][T17832] lo speed is unknown, defaulting to 1000 [ 1792.945439][T17835] virt_wifi0 speed is unknown, defaulting to 1000 [ 1793.119954][T14080] tipc: TX() has been purged, node left! [ 1793.289067][T17835] lo speed is unknown, defaulting to 1000 03:23:13 executing program 2 (fault-call:2 fault-nth:5): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x81000000}}]}, 0x30}}, 0x0) 03:23:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000e000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:13 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000088a8ffff000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:13 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:13 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000010000108000000000000000004000a00", @ANYRES32=0x0, @ANYBLOB="00ca93937bf38f94338c03c7596a0f4265fe0683f897aab9f99f3598b7127bbc2f8f9d7fcd8698a0caf6d7a730c5bedb403a82cf396d31fb646ef0de415095852c372e6956e2775ead0cf3bdf75427a9f862f22645861155577efd86491fafbd981f25e515f69ab1d056489d535ea43d021b50b877cb6e3d490382cf586abf15bc0a3e0caa0158fe115f43223037b1bf02cde2888da302ddea6bcca0351e02ec4cd5af948d427f7aa8bd55d30b9d76cc01e95eb90f3277000000000000000000"], 0x28}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x2, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000008c0)={r3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000f2ffffff0f000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012abd7000fedbdf250f00000004000180"], 0x18}}, 0x15) [ 1796.952743][T18044] FAULT_INJECTION: forcing a failure. [ 1796.952743][T18044] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1796.961688][T18047] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1796.997000][T18044] CPU: 0 PID: 18044 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1797.005335][T18044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1797.015384][T18044] Call Trace: [ 1797.018711][T18044] dump_stack+0x18f/0x20d [ 1797.023083][T18044] should_fail.cold+0x5/0x14 [ 1797.027694][T18044] __alloc_pages_nodemask+0x1a3/0x930 [ 1797.033077][T18044] ? __alloc_pages_slowpath.constprop.0+0x27a0/0x27a0 [ 1797.039864][T18044] ? trace_hardirqs_on+0x5f/0x220 [ 1797.044902][T18044] ? lockdep_hardirqs_on+0x76/0xf0 [ 1797.050018][T18044] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 1797.050042][T18044] alloc_pages_current+0x187/0x280 [ 1797.050064][T18044] __get_free_pages+0x8/0x40 [ 1797.050087][T18044] __genradix_ptr_alloc+0x15a/0x380 [ 1797.070891][T18044] __genradix_prealloc+0x56/0x90 [ 1797.075837][T18044] sctp_stream_init+0x3d8/0x650 [ 1797.080704][T18044] sctp_association_new+0x12c0/0x2050 [ 1797.086087][T18044] sctp_connect_new_asoc+0x1ac/0x770 [ 1797.086626][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1797.091375][T18044] ? sctp_bind+0xd0/0xd0 [ 1797.091395][T18044] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1797.091410][T18044] ? sctp_get_af_specific+0x51/0x60 [ 1797.091427][T18044] __sctp_connect+0x3e2/0xc00 [ 1797.091449][T18044] ? sctp_connect_new_asoc+0x770/0x770 [ 1797.091469][T18044] ? security_sctp_bind_connect+0x8f/0xc0 [ 1797.091486][T18044] __sctp_setsockopt_connectx+0xfa/0x140 [ 1797.091503][T18044] sctp_getsockopt+0x16dc/0x6d0a [ 1797.091525][T18044] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1797.091541][T18044] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1797.091555][T18044] ? _parse_integer+0x132/0x180 [ 1797.091577][T18044] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1797.165432][T18044] ? lock_acquire+0x1f1/0xad0 [ 1797.170116][T18044] ? do_dup2+0x520/0x520 [ 1797.174362][T18044] ? __fget_files+0x272/0x400 [ 1797.179046][T18044] ? lock_is_held_type+0xbb/0xf0 [ 1797.183983][T18044] ? lock_downgrade+0x830/0x830 [ 1797.188869][T18044] ? aa_sk_perm+0x316/0xaa0 [ 1797.193377][T18044] ? aa_af_perm+0x230/0x230 [ 1797.197904][T18044] ? sock_def_destruct+0x10/0x10 [ 1797.202839][T18044] __sys_getsockopt+0x219/0x4c0 [ 1797.207702][T18044] ? vfs_write+0x1b0/0x6b0 [ 1797.212129][T18044] ? __ia32_sys_setsockopt+0x150/0x150 [ 1797.217588][T18044] ? fput_many+0x2f/0x1a0 [ 1797.221937][T18044] ? syscall_enter_from_user_mode+0x20/0x290 [ 1797.227926][T18044] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1797.233916][T18044] __x64_sys_getsockopt+0xba/0x150 [ 1797.239033][T18044] ? syscall_enter_from_user_mode+0x20/0x290 [ 1797.245022][T18044] do_syscall_64+0x2d/0x70 [ 1797.249443][T18044] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1797.255341][T18044] RIP: 0033:0x45ce69 [ 1797.259236][T18044] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1797.278838][T18044] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1797.287252][T18044] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 03:23:14 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000f0ffff000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000000f000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x88a8ffff}}]}, 0x30}}, 0x0) [ 1797.295224][T18044] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1797.303196][T18044] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1797.311170][T18044] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000005 [ 1797.319141][T18044] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) r2 = accept(r0, &(0x7f0000000a00)=@x25, &(0x7f0000000980)=0x80) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="09000000b88ba764441b61a931299af60bb1641403d59b4a6ba1005f559c081b5c0e734f4e44", @ANYRESHEX=r0, @ANYRESOCT], 0x3}}, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000003040)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003000)={&(0x7f0000000b00)=ANY=[@ANYRES64=r1, @ANYRES16=r3, @ANYBLOB="000002000000000000002000000000ff2c04e93e4515e592ca08eabf0e6737d39cd5c9b9cc231a6770334eb80ee691441aea585c623da9c1a130233a057c624289ee6ef17cbbc40161cc505b222e355b14d2610a4f9c38b4b5c7a85f3f720676b8250d9783010a7120ee70dc2c89694d481e74bb0a1ffd04a87d1475296c17d503d2623e49d2326e0d58dff30a6490f560f048232644b1447989a2a48b6962c66c38b62fde361683177d0fc864960cfcddc61ba97c4c7f2a70d9f7d94b3bb02e41e675974d820dcd14b50ae06c752fbdbf1a149d0c6754917382613af675a6a11e53cdbe8e617ff949665cf7c0aa1bd9cafd21f8c9854cd003fc71e3728859aed3e48c48e4f81ea8"], 0x3}, 0x1, 0x0, 0x0, 0x20040010}, 0x4004020) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) r5 = socket(0x10, 0x5, 0x0) r6 = socket(0x2a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000540), &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c000000130001050000ea00fddbdfa5000000004608bcf4e7317bf783f10b8bf4635eb44b9840ec4dda5c9cfd740232d655a79a73a5f06e3e1a7cd31b2d2f5742d77c75ab9d96f09c7d016767868cedef92ab7f3220f84edb8b8fdd285e420d15269cdb22482687b9927e1cc07abe342d378f79c5388ea7ffbfaf1a32f94d917d63b73ecf873fe30741138aa28945842c98179c39373383368a42026050b3fe52e60059b197881b3b59c4e211ea5b5225acb511e0c72f9ce9a396226537a961bb81c509c4b8a629f0983fd99dc1531c1be55258592e41ce31", @ANYRESHEX, @ANYRES16, @ANYRES16, @ANYRES64=r2], 0x2c}}, 0x44000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x5c020200}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)=ANY=[], 0x3}, 0x1, 0x0, 0x0, 0xc8080}, 0x20040055) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000e00)=0xe5, &(0x7f00000009c0)=0x2) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r10 = openat$cgroup_ro(r4, &(0x7f00000005c0)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) write$cgroup_type(r10, &(0x7f0000000000)='threaded\x00', 0xb1d000) getsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f00000003c0)=0x4, &(0x7f0000000400)=0x1) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000028002104000000000000010008000000", @ANYRES32, @ANYBLOB="ac0c0000fffffffffffff0000c0080eb8600000075700000200002001c0004"], 0x3}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r11, &(0x7f0000000140), 0x5, 0x0) 03:23:14 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300007fffffff000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x9effffff}}]}, 0x30}}, 0x0) [ 1797.505760][T18047] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:14 executing program 2 (fault-call:2 fault-nth:6): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000010000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xee080000}}]}, 0x30}}, 0x0) 03:23:14 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)='0', 0x1}, {&(0x7f0000000040)='2', 0x1}], 0x2) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="84d8bf9a9ae7247c60afd003002d378b7f1169de2f9e7796649e3b8ea84a0d58fe6cc324b61ab6a8d4637adba03c2b782b76dec16fe1c480d1083f34591bc03d5d8c51e6ddf88c33bb2261d2870e4fca6f9168d67784bac2872c2d1e0f095d4a7ee7a394b0541c3027d9cc265fcddab988c6d623ad9e", 0x76}, {&(0x7f0000000340)="a3f30a9faf4d820a8e63234328e6313c5a8686cb0151d3060cf5ba199c5a187afa5d2c5e6a2f85543e0de3f656b4c1119ac95c898a0c98523dad9ebc2740a220ceca73856801152736e2a90231fe2c85c7ce1f920898c5021ef3e27c59c6d1394ff1a960f87ee47af62476e63ffe2e29c2efe8fca97c4c88067672f058300a0ca95e4fd704db8b4885132010560a2f174ab690aa551db7bc99270be214ffe84b40de8a2435d12ffa1ce37c248fbf47e0874bc0da320d291b5b1989b4fa8c36a9c6456d39338f8b6ebb469247b3f4eeec70365e26858f1540b6e154dde5095523ac238d682de297b802e81a1244826c988b90031e81e8baa76fc19850a3bfc392e312b854849d059bd218f871b9e4e3fedf26f2344f085c47fd32f5c4f433b4a33d20cde82949a6842f4cd8142651f8bdf7b295f8eb3b84e0611cea1076a54639e3d271237a5719ac1092b05b11d83d9d22e6bf98b0d3f4180a239f1f63a95b2074611ab41a33240be359aae030822e941ede2d1aec596d47155d5564a997b89ddbe3467ac9a7df12f22fa82ab4559e59af91c113d5d25cb35a61341d6ff9655fe6d05bc20d627a8b9b9697aa04793691acfc604f2ef989d5240d7cbbfd2d819afda33012328b3c6ae98d48af8ff95a0b226660d9ca611ba99024c5d1890f038e3cb5a8e2a3fc13ed00507b3c01626905f3b024bb9fb862a922e117b98adae60ad419394e2cd9e7276b9377b3064c94260cbeb3f47ffcc97c7a9387d93539b5eb3e147f0ef58c65e899e410ee5028eed60510a8dc37f4b837ec05c35dcee8d925eb15c29e5536ba6c83f6cc3f2da6cc1f0509313efd34e0e082343f4f43c5e1e1902c866fe633dd837c2d66c80694e5b6a7fa2c1b06ed3a30019d72473a48fd29f14b3d984a71adac55f954ac186ba95267376dd08762fa1cc091ebcf6a57766d2422172914eaf993950364651b9b7f2c2d0562635ad364997f7d12f170d6b28682565c58ce127480f99bf4bcba2b564389e59fd98f7e1343e15b7da0e09a060369723e65b556a9a0bcb1351cdbb8274d44cc5ffdff5bb8ac140c32903be9aeaae47dd4598cceb37f8d9f06a779d1bb6e5595f36b5b55f44340f44872403df65a6c7af8e6830a6b84c20cda3bce242626219c3a059d0acd1bcaedc1f5f7a64b9bfa9279d5bfcfadbb20071708df3b8164b5ef3343870fde292d1c4770fef139b032bd5eb6dc03cfb2f87aa6f93326c4c1078361d577427bdbb571f15bfbba3823d774e25664ac71697dd9b198983306f4dc874329d4ce520fc93f09ca515ea58d24d85ae728a10e0baf70ecfda7a7f49953e4bac8fd090304b63523c70e77bcf48d47b97d977ede47f2295e43749f6bd064b07149b23b5a89de4fff9d5472c93127cf6069816e900672898631f67ef4b5952b85133711090402f0cea41541170e1e9f8f6d607ae65342acb63709727b5aa644cd025316a4d88c095b03d4fa6bb81186a725f698c0ded088a4d86b9a4918c1cc53c3479fb3fba987de634bd1b262dbca7edd01b1f8ce6b462ac35861ab3e4b1e4d188e2178d09d37c1a2e3c646567def3d601c6f3749bda5d04dbd9217456ee5b2ddb2a57f49467f54dc33e91202d587925762dc2b14c0c65f4183ea913d347f511a4a1ce35e6e403680817158f20a9e26985f8e3ad606957e37711d7eaa975616581b0981903fefbf30c2898985c6d953a1fcda8c7f311dfd2a5cf42e63eeba62bf6ad1afdfe46570988c72c85d1ca148bbbb60e8af8232fb1709fdc4306994a0e8cb7b8b50975d58f1886ceb18d7ad5599fe31a49e086755ea40956d45138003e940c41365d1559d270ebcf9fdb1039d9b14c8969e7380c5152f2a3ef59eb15f36a30adba1394d298472719eb28a00320819f03f70addea3b91c731ff72e3bc87e38b95d0cda9ed666ad060b90bc2078dae741a0066fa3de3a739e349beb715b98b511b2773e0517118bb3ed84bf67cb36e81d2a415620bb2200590f349e108d2f622ff7f60282bb57e7cf868bd0ad5410eaf8d70365864916bb02d60ee13ee1ada83eb768f34d067d28aacdb068f50cf35bebbc7a0be6e9f356864b900827aecae377b641f12278f9e4941705d8d110c76bdc3a2cb996fd08cc9367a5e45fca1d890d70b1ef8cfd4c76ae8ae909c47bc98ad9873bc1845a00997c053ffc927652a202355bd42c2e6462fd89fb8ccdfd9a681f0b058f2f9912c6798c5dae224c50d76f5174ed721e1987f85c65c4ff1ae1a534114d2bc07f1f03672734de0f13691a22f542607b83b9fa34813d97bda828f81f0da0b991d6dfd92861b2d48a22cbf08c192d0fcaa6b335df5646229296523076ef8300e2dd83abd4ccaf51132a12d59c19d3c9348406f4b3bbeafe1dee8fe15afd633c2d4614b8930ed1aa1ec6e23163c8743b26292cdd015853fd1e9efe1cdf87740dc39bc30f40f03c951bd2bf98da3402f95fc21cdc698821189a7f11a70f8c77075164fce475d24c8429ec5be34f3aa96df0167e7a248571430af82aabc4e476466ec46e6af4592140201c97d20b6ac62b80b41d8a2202cc185033722d2e816778d2568b59906078b5ef8d686b18fef06affc725848fd6a9fff7dd08b0bf1ed4a7e98a28164c29c5fa65e7e65d3185a8ab84b1088cee80fee233a9129bbfc1fda9b666c44f687995bd9aa7e8ed0c85def657b8e49bd22612b572263793872a8dadd4e0d6dd74d4f4f781c93a5c0c1829d129674ff54a8757af831b4403150cc6b26deea17913abea25c79b27493e67d8021293f31bc423cbf122f8ad24d16938181a619cca119d43c458b7540fcf57c67925d42777fdc4b0a46151bbddc21c8b23b581c376eb9d2732a6cae1409f058ff9c3a84ccb6a01a2f9d939d654bb539f30b606d181503267af25b7a168632dd7c44debec1938a5c2164c1378828f8575ad14730aa4d6b30af4c71a17eae370738af1cb3b2071963849c6b6f944a644b886680894b8eb34ba08ca14671620700d61a43501d6a136328a762e71bfe46d462d06854a85912e7d9158854c14d11a962ad81bc8c1d9640562bb351007f912150d8f697f5e2830d43402c2fda7e5fc1800ccee67ce3ad999f311636f6f6e5943e950496ab71c7f6566c3ed3666f9576d423627e9d5fa5042a8cef0944656df2069d9f16c1b7c76f85514eee93a3efe7803becd967c2158bfd65baae8cafe5257a957a880fc44ac15c3cf742657f796e5bfa8bb757632d69c442035ab3c3d0342bc3fd861dfd93babc1bfbb6b391c308ec659e3e3d3d9a430854d23d480f0d83b9a5f11fb2d09753bdde90cac52b7927fd46f3150742df8cba573d8c227765b78c4eeedafb1f2bd1a6235219a497e4fb2a89ce783b83e5c78c501f4c02cfa97b77c2512a0f630c27653a70d017d29ab98c7e123106d875e46cdc4cab27b963893688063745921521af5f023a12806e97c15d5b5ed0f35d12fcc110a73bdc5baa3018bf404b4f800d4fedbf7c0a1f41705c89b59d559371b619810d588f528f60123a8fa77524e8f0ddd4fb6dda0cc34d57722bd8d3e428f2c6a7b4c817064cbac4de394ab0a51164f41a09607f4e328248110a69ecb839b5b99df13773c64bd4853ae493588211cfc63e0477eeaa31605544f33f32603a42dceb96de03da25548a827f6aef5701d69893ca133a4d8b652606f8689f8f1b9199c2ea4e96f6f42b5345633a73b11542a71705519612d06543c6c3bb819b295b6f49b0c75559c1d7f69ae6e68d4eba50b9d7da25d2359d15b0467122cd89bf2d9c3661f9091029f58ac3aecc8e62091520ee8dcb596ec09c28433bc83e5ef5a9be0abe968476cbe70e51e696ed944f0dafae17920932dd31c48378ccba6eb2b8a4a2d4db7a40e3a440b4de6de6787b4acb91e5cea5910be21d93f70bb50b654f2c91360bdd6b2e14265e0a11cb66e17c32e2d79f3676d7dcc793b4b63e5e4ea0a61a41005754d261174ca7b5dbb4ae9021f8615797094d2007e7a971e30d864c5ca53748ed4c9c37fde46bc4e709dfbfa42bca3a71e3b1a580675be72cf4d30f3c533246c32f72f5fa909ef83cda4077de81155fce00554025ef0cba9da12ad994ba71c9157646fc29415ce1a92555e5776af074592852ae3d94c924141791c2b59c151234dfc946bbb16623f354dd7cfc3cf127248238273c8de8a60f5dfec37c6e7aa032bf164cdb171e36d76a30abdd1024532e6971f660dcca121ac35bcb5dcefa1a51a2be54f415bd782fb69617e31582fcae14fa601252f5e5365c5ce817184d0d78092a326a23cb3cadda2d049e3edb488c4c02ff6171aceb051889ee3d539a036b922117e576e40ff5ce5b8e9e55965b1f98c52efacce9fd495d6ab8212f50e0ba26795f5a879f1e96dc0e641158131155b099f3aa19cd3fb90ffc966758f3e140ceae8683c9b20c8c3e59d71945b3b194f5a1bb17050a7ba066900a05dfb8892619e4ea7b1a72554cbf60f1179922506346d6ac312c709f41e37832c10e39044e7e8cdd20bcffa88b25ee2a568fbf4f6fb044ef4da429f5a31ef6774fe68b982e18bd9b7c9fb86c6714a095ea81b000b303246a13aec2afd1f0c59fe59dd789bce041788157b35760d52415a327e4cc5feeb86eab75387b01eee4224e551e8c0cd80a7533c11f74573f717dd694e3966c38955275a5ec099b9383eb1f5cd55fcf5823015148088a7f4416298c44e5a34648d3e59b5e33ae6ea87700317321009c034d15e3d92ac075c498365a06edf681c61886e35193542a0c1b2b054753e07c83c4b051b42b88a69a7c3f893ef83a58189b762a387ff06adaeeffe16a461b166766b907cebae6205f06b1f267275f926339fcd2249c6552d30bcda65ee21fad0f8ec4809ce1679911931c5e8b48aaf800240d448c942cad5e352a7d88d6727ed2b63f8fdcac56dff386d4f8553649a87368e37a795a460d91fe35405c4ac586fa0f4dab60807bc527e63cfae60230a20f9e8f0d5a8bd77ef297d9a1c84a19ac1925741001992bdfdf5bd05f4f8c331e44ff47031c771ed24602eddc413526557285706993ecb363cc3f510b33bff3c9314e93de2b6a235dcb1f63e8765f3745f49dd7fb48d66364f4c06a25b46fcf2596636f68d9be611cc2acbf5ea70455ffabf872aabe8e312e4710a969d09fd03c7f833621fe9f30a12088b983133253dc792070ed0e3875ceb6698d5577b565b3db965185e1cc04339b1727d14357e1761bb294746133333161371d15b96037c0370338ee5ddc9a7795a80a65526c8979a686a7c70699206b07355e60314a6b68108dcd448a585cbd6ffd9ca4b0ee5c639d6de3fdfcde97057e9315de72bcbe1c5d96306a2bffc25f4d6aa73b33ea40bf2eeccf3bfd03070d5d2cfe696117a9d9e0f873283a074c4ad6469bb6dad7aa5bcbd07bd6bb88ee3372ebed7f9c51f83979dc991f2c33beb4296c14eee2bd6ce41aa9dffb9172cb0881e0c29bdd42af260e63494d33b3d84249271ebf34407ca7301ba730885e05909e408344423d709e950e7e2896b829d4b23220063f305f385f80d48e2a890e84b75a14fe78b688aca05ebbdf20aca72e45c69af076885168f0f18a3ab0a231c8dbc1613ebf49d9a79ea2a5e617b56d3f5c9c4c6469a9dccb94f754ed19e67334f3c531395d8cc492051ca0e0470703fb49f716b8b64c50d2ded9959bff6078abc411f003dc1070cfad8a30088a62316a013c3964b08259cd9b1226dd4b9398e3f259c93283eed240d33c214bd019a0653287aa8", 0x1000}, {&(0x7f00000001c0)="68c8020785fd480d74fc1ab4ef0fd24702db4af5af52101868031b83c49ba61d8f238c788099fa808e69a56670ae1136f7c8299b72a7768e", 0x38}, {&(0x7f0000000200)="b928ad5f6eec", 0x6}, {&(0x7f0000001340)="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", 0x1000}], 0x5) 03:23:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:14 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300009effffff000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1797.842539][T18115] FAULT_INJECTION: forcing a failure. [ 1797.842539][T18115] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.891811][T18115] CPU: 0 PID: 18115 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1797.900157][T18115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1797.910205][T18115] Call Trace: [ 1797.913500][T18115] dump_stack+0x18f/0x20d [ 1797.917835][T18115] should_fail.cold+0x5/0x14 [ 1797.922437][T18115] should_failslab+0x5/0xf [ 1797.926854][T18115] kmem_cache_alloc_trace+0x240/0x2d0 [ 1797.932291][T18115] sctp_auth_shkey_create+0x7d/0x190 03:23:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000020000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xf0ffffff}}]}, 0x30}}, 0x0) [ 1797.937598][T18115] sctp_auth_asoc_copy_shkeys+0x1e8/0x350 [ 1797.943336][T18115] sctp_association_new+0x16f7/0x2050 [ 1797.948721][T18115] sctp_connect_new_asoc+0x1ac/0x770 [ 1797.954018][T18115] ? sctp_bind+0xd0/0xd0 [ 1797.958271][T18115] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1797.964174][T18115] ? sctp_get_af_specific+0x51/0x60 [ 1797.969390][T18115] __sctp_connect+0x3e2/0xc00 [ 1797.974091][T18115] ? sctp_connect_new_asoc+0x770/0x770 [ 1797.979565][T18115] ? security_sctp_bind_connect+0x8f/0xc0 [ 1797.985298][T18115] __sctp_setsockopt_connectx+0xfa/0x140 [ 1797.990947][T18115] sctp_getsockopt+0x16dc/0x6d0a [ 1797.995900][T18115] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1798.002149][T18115] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1798.008133][T18115] ? _parse_integer+0x132/0x180 [ 1798.012996][T18115] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1798.018994][T18115] ? lock_acquire+0x1f1/0xad0 [ 1798.023684][T18115] ? do_dup2+0x520/0x520 [ 1798.027941][T18115] ? __fget_files+0x272/0x400 [ 1798.032629][T18115] ? lock_is_held_type+0xbb/0xf0 [ 1798.037565][T18115] ? lock_downgrade+0x830/0x830 03:23:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000001527000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xffffa888}}]}, 0x30}}, 0x0) [ 1798.042432][T18115] ? aa_sk_perm+0x316/0xaa0 [ 1798.046938][T18115] ? aa_af_perm+0x230/0x230 [ 1798.051456][T18115] ? sock_def_destruct+0x10/0x10 [ 1798.056393][T18115] __sys_getsockopt+0x219/0x4c0 [ 1798.061252][T18115] ? vfs_write+0x1b0/0x6b0 [ 1798.065673][T18115] ? __ia32_sys_setsockopt+0x150/0x150 [ 1798.071136][T18115] ? fput_many+0x2f/0x1a0 [ 1798.075499][T18115] ? syscall_enter_from_user_mode+0x20/0x290 [ 1798.081511][T18115] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1798.087493][T18115] __x64_sys_getsockopt+0xba/0x150 [ 1798.092618][T18115] ? syscall_enter_from_user_mode+0x20/0x290 [ 1798.098626][T18115] do_syscall_64+0x2d/0x70 [ 1798.103043][T18115] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1798.108936][T18115] RIP: 0033:0x45ce69 [ 1798.112830][T18115] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1798.132431][T18115] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 03:23:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000040000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1798.140843][T18115] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1798.148831][T18115] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1798.156803][T18115] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1798.164771][T18115] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000006 [ 1798.172739][T18115] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xfffff000}}]}, 0x30}}, 0x0) [ 1798.243234][T18137] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:15 executing program 2 (fault-call:2 fault-nth:7): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xffffff7f}}]}, 0x30}}, 0x0) 03:23:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0xc0}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x48, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffff73}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x76}]}, 0x48}}, 0x40020) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000080)={0xa, 0x4e24, 0x2, @ipv4={[], [], @local}, 0x7ff}, 0x1c, &(0x7f0000001300)=[{&(0x7f00000000c0)="1d2bc133d6dcbe94146d22cbb8df0c25233f61c8e823969e0e70a9ada1c01702d274a412d087902a4888348277bae1b8e68a4da3ba85df1c41bdce1a4646d001cc3f01febea45f26f0e065d5aae3c17b9666b95d94306f07fdb1d25fe9363665748492b821e6557c39e37986a591abfec1d1cc2937efe510625eac9569342b50baecf61970be150c76a2b0225909139956ef041e1f2c179057c10a0c97ddd0fc10f137d95c66e30aa4a63441e4a5de943ce78cd4afea50b752d179bfbda29ea9c2a4b185cb", 0xc5}, {&(0x7f00000001c0)="cef880b1cf532d4cc9686ee22ca1b213e9da47fdf8f00c5915c7fc6b50e87be24c00698b450bc7aecd011b9d306a1bac522bc0ab15fa72cfb99504c200d8656b593c6e32ec28eb1c74418774b39e6233a5436743758aa751a514cfadaa5dc836ab3fc0f2df820cfaa84d048ac429583669ccddb670a18ff1d1", 0x79}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="0d188c0291bae76da2a3ef041c5c54b64092f9ce0a4c68db6c1c15f350193036953808e2a3c066a58bf37fa18e938e055607b43414e2be97889a4bcf233a9e7783dad2fd4a32be190d781d9d9a9b25d9bea8d22fa1a9b3f0550fe5b40756da0f905e261c0d1bb392c8de66137b0aa0b76797f434818b189dad06df6a99759299777b22", 0x83}], 0x4, &(0x7f0000001340)=[@rthdrdstopts={{0x60, 0x29, 0x37, {0x4, 0x9, [], [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x9, [0x2, 0xb0f9, 0x100000001, 0x5]}}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x20}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x16, 0x1, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x88}, 0x20000000) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x4e}}) 03:23:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000f0ffffff000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1798.485584][T18167] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1798.528307][T18168] FAULT_INJECTION: forcing a failure. [ 1798.528307][T18168] name failslab, interval 1, probability 0, space 0, times 0 [ 1798.576176][T18168] CPU: 1 PID: 18168 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1798.584515][T18168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1798.594567][T18168] Call Trace: [ 1798.597860][T18168] dump_stack+0x18f/0x20d [ 1798.602188][T18168] should_fail.cold+0x5/0x14 [ 1798.606785][T18168] should_failslab+0x5/0xf [ 1798.611199][T18168] kmem_cache_alloc_trace+0x47/0x2d0 [ 1798.616480][T18168] sctp_add_bind_addr+0x8c/0x370 [ 1798.621439][T18168] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1798.627093][T18168] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1798.632580][T18168] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1798.638487][T18168] sctp_bind_addr_copy+0xde/0x460 [ 1798.643503][T18168] sctp_connect_new_asoc+0x1cd/0x770 [ 1798.648788][T18168] ? sctp_bind+0xd0/0xd0 [ 1798.653057][T18168] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1798.658952][T18168] ? sctp_get_af_specific+0x51/0x60 [ 1798.664139][T18168] __sctp_connect+0x3e2/0xc00 [ 1798.668843][T18168] ? sctp_connect_new_asoc+0x770/0x770 [ 1798.674311][T18168] ? security_sctp_bind_connect+0x8f/0xc0 [ 1798.680036][T18168] __sctp_setsockopt_connectx+0xfa/0x140 [ 1798.685663][T18168] sctp_getsockopt+0x16dc/0x6d0a [ 1798.690602][T18168] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1798.696847][T18168] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1798.702806][T18168] ? _parse_integer+0x132/0x180 [ 1798.707671][T18168] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1798.713648][T18168] ? lock_acquire+0x1f1/0xad0 [ 1798.718331][T18168] ? do_dup2+0x520/0x520 [ 1798.722603][T18168] ? __fget_files+0x272/0x400 [ 1798.727287][T18168] ? lock_is_held_type+0xbb/0xf0 [ 1798.732230][T18168] ? lock_downgrade+0x830/0x830 [ 1798.737090][T18168] ? aa_sk_perm+0x316/0xaa0 [ 1798.741600][T18168] ? aa_af_perm+0x230/0x230 [ 1798.746119][T18168] ? sock_def_destruct+0x10/0x10 [ 1798.751077][T18168] __sys_getsockopt+0x219/0x4c0 [ 1798.755930][T18168] ? vfs_write+0x1b0/0x6b0 [ 1798.760346][T18168] ? __ia32_sys_setsockopt+0x150/0x150 [ 1798.765801][T18168] ? fput_many+0x2f/0x1a0 [ 1798.770138][T18168] ? syscall_enter_from_user_mode+0x20/0x290 [ 1798.776124][T18168] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1798.782108][T18168] __x64_sys_getsockopt+0xba/0x150 [ 1798.787220][T18168] ? syscall_enter_from_user_mode+0x20/0x290 [ 1798.793205][T18168] do_syscall_64+0x2d/0x70 [ 1798.797641][T18168] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1798.803531][T18168] RIP: 0033:0x45ce69 [ 1798.807426][T18168] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1798.827028][T18168] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1798.835434][T18168] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1798.843407][T18168] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1798.851375][T18168] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1798.859345][T18168] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000007 [ 1798.867316][T18168] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c [ 1798.907766][T18137] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1798.914128][T18207] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1798.980024][T18207] bond129 (uninitialized): Released all slaves [ 1798.985712][ T0] NOHZ: local_softirq_pending 08 03:23:16 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000060000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000070000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xffffff9e}}]}, 0x30}}, 0x0) 03:23:16 executing program 2 (fault-call:2 fault-nth:8): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:16 executing program 3: sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="68bcb320", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf251b00000007"], 0x48}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) sendfile(r2, r1, 0x0, 0x100000001) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000480)={0xf65, 0x5, 0x1, 0x3, 0x8, [{0x4, 0x4, 0xbfe}, {0xa5, 0x401, 0x7, [], 0x800}, {0x3, 0x7, 0x20, [], 0x2000}, {0xfff, 0x9, 0x8001, [], 0x400}, {0x1, 0xdafa, 0x20, [], 0x200}, {0x3, 0x3, 0x4, [], 0x200}, {0x7, 0x1ca, 0x100000001}, {0x0, 0x5, 0x5, [], 0x800}]}) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000140)={0x10}) [ 1799.205035][T18240] FAULT_INJECTION: forcing a failure. [ 1799.205035][T18240] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.282605][T18240] CPU: 0 PID: 18240 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1799.290951][T18240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1799.298696][T18246] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1799.301002][T18240] Call Trace: [ 1799.301080][T18240] dump_stack+0x18f/0x20d [ 1799.316716][T18240] should_fail.cold+0x5/0x14 [ 1799.321348][T18240] should_failslab+0x5/0xf [ 1799.325765][T18240] kmem_cache_alloc_trace+0x47/0x2d0 [ 1799.331055][T18240] sctp_add_bind_addr+0x8c/0x370 [ 1799.335999][T18240] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1799.341636][T18240] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1799.347107][T18240] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1799.353028][T18240] sctp_bind_addr_copy+0xde/0x460 [ 1799.358064][T18240] sctp_connect_new_asoc+0x1cd/0x770 [ 1799.363364][T18240] ? sctp_bind+0xd0/0xd0 [ 1799.367615][T18240] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1799.373512][T18240] ? sctp_get_af_specific+0x51/0x60 [ 1799.378719][T18240] __sctp_connect+0x3e2/0xc00 [ 1799.383406][T18240] ? sctp_connect_new_asoc+0x770/0x770 [ 1799.388901][T18240] ? security_sctp_bind_connect+0x8f/0xc0 [ 1799.394650][T18240] __sctp_setsockopt_connectx+0xfa/0x140 [ 1799.400290][T18240] sctp_getsockopt+0x16dc/0x6d0a [ 1799.405242][T18240] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1799.411488][T18240] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1799.417470][T18240] ? _parse_integer+0x132/0x180 [ 1799.422328][T18240] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1799.428324][T18240] ? lock_acquire+0x1f1/0xad0 [ 1799.433007][T18240] ? do_dup2+0x520/0x520 [ 1799.437251][T18240] ? __fget_files+0x272/0x400 [ 1799.441937][T18240] ? lock_is_held_type+0xbb/0xf0 [ 1799.446877][T18240] ? lock_downgrade+0x830/0x830 [ 1799.451737][T18240] ? aa_sk_perm+0x316/0xaa0 [ 1799.456245][T18240] ? aa_af_perm+0x230/0x230 [ 1799.460789][T18240] ? sock_def_destruct+0x10/0x10 [ 1799.465747][T18240] __sys_getsockopt+0x219/0x4c0 [ 1799.470599][T18240] ? vfs_write+0x1b0/0x6b0 [ 1799.475134][T18240] ? __ia32_sys_setsockopt+0x150/0x150 [ 1799.480694][T18240] ? fput_many+0x2f/0x1a0 [ 1799.485033][T18240] ? syscall_enter_from_user_mode+0x20/0x290 [ 1799.491015][T18240] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1799.497005][T18240] __x64_sys_getsockopt+0xba/0x150 [ 1799.502148][T18240] ? syscall_enter_from_user_mode+0x20/0x290 [ 1799.508158][T18240] do_syscall_64+0x2d/0x70 [ 1799.512576][T18240] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1799.518468][T18240] RIP: 0033:0x45ce69 [ 1799.522373][T18240] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1799.541976][T18240] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1799.550390][T18240] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1799.558387][T18240] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1799.567942][T18240] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1799.575936][T18240] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000008 03:23:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xfffffff0}}]}, 0x30}}, 0x0) 03:23:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000340000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1799.583917][T18240] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000005865000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:16 executing program 2 (fault-call:2 fault-nth:9): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1799.653048][ T29] audit: type=1804 audit(1596943396.650:1588): pid=18242 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1925/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 1799.722979][T18246] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x40030000000000}}]}, 0x30}}, 0x0) 03:23:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000fffffffffffff0000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1799.868563][T18283] FAULT_INJECTION: forcing a failure. [ 1799.868563][T18283] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.926924][T18283] CPU: 1 PID: 18283 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1799.935316][T18283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1799.945816][T18283] Call Trace: [ 1799.949118][T18283] dump_stack+0x18f/0x20d [ 1799.953466][T18283] should_fail.cold+0x5/0x14 [ 1799.958075][T18283] should_failslab+0x5/0xf [ 1799.962502][T18283] kmem_cache_alloc_trace+0x47/0x2d0 [ 1799.967796][T18283] sctp_add_bind_addr+0x8c/0x370 [ 1799.972746][T18283] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1799.978396][T18283] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1799.983871][T18283] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1799.989782][T18283] sctp_bind_addr_copy+0xde/0x460 [ 1799.998905][T18283] sctp_connect_new_asoc+0x1cd/0x770 [ 1800.004206][T18283] ? sctp_bind+0xd0/0xd0 [ 1800.008458][T18283] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1800.014364][T18283] ? sctp_get_af_specific+0x51/0x60 [ 1800.019574][T18283] __sctp_connect+0x3e2/0xc00 [ 1800.024268][T18283] ? sctp_connect_new_asoc+0x770/0x770 [ 1800.029743][T18283] ? security_sctp_bind_connect+0x8f/0xc0 [ 1800.035480][T18283] __sctp_setsockopt_connectx+0xfa/0x140 [ 1800.041123][T18283] sctp_getsockopt+0x16dc/0x6d0a [ 1800.046081][T18283] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1800.052337][T18283] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1800.058323][T18283] ? _parse_integer+0x132/0x180 [ 1800.063190][T18283] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1800.069183][T18283] ? lock_acquire+0x1f1/0xad0 [ 1800.073864][T18283] ? do_dup2+0x520/0x520 [ 1800.078112][T18283] ? __fget_files+0x272/0x400 [ 1800.082800][T18283] ? lock_is_held_type+0xbb/0xf0 [ 1800.087768][T18283] ? lock_downgrade+0x830/0x830 [ 1800.092657][T18283] ? aa_sk_perm+0x316/0xaa0 [ 1800.097173][T18283] ? aa_af_perm+0x230/0x230 [ 1800.101700][T18283] ? sock_def_destruct+0x10/0x10 [ 1800.106648][T18283] __sys_getsockopt+0x219/0x4c0 [ 1800.111506][T18283] ? vfs_write+0x1b0/0x6b0 [ 1800.115927][T18283] ? __ia32_sys_setsockopt+0x150/0x150 [ 1800.121387][T18283] ? fput_many+0x2f/0x1a0 [ 1800.125727][T18283] ? syscall_enter_from_user_mode+0x20/0x290 [ 1800.131714][T18283] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1800.137697][T18283] __x64_sys_getsockopt+0xba/0x150 [ 1800.142840][T18283] ? syscall_enter_from_user_mode+0x20/0x290 [ 1800.148827][T18283] do_syscall_64+0x2d/0x70 [ 1800.153245][T18283] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1800.159135][T18283] RIP: 0033:0x45ce69 [ 1800.163057][T18283] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1800.182665][T18283] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1800.191077][T18283] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1800.199053][T18283] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1800.208420][T18283] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1800.216394][T18283] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000009 [ 1800.224366][T18283] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c [ 1800.283835][ T29] audit: type=1804 audit(1596943397.280:1589): pid=18261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1925/cgroup.controllers" dev="sda1" ino=16365 res=1 03:23:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000081000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xf0ffffffffffff}}]}, 0x30}}, 0x0) 03:23:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = accept4$packet(r1, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000880)=0x14, 0x400) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x7a000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250801ec000050bada9f66721389", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\x00'], 0x28}}, 0x0) 03:23:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000010000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:17 executing program 2 (fault-call:2 fault-nth:10): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1800.642709][T18315] FAULT_INJECTION: forcing a failure. [ 1800.642709][T18315] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.659878][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1800.680490][T18315] CPU: 0 PID: 18315 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1800.688838][T18315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1800.698893][T18315] Call Trace: [ 1800.702188][T18315] dump_stack+0x18f/0x20d [ 1800.706530][T18315] should_fail.cold+0x5/0x14 [ 1800.711142][T18315] should_failslab+0x5/0xf [ 1800.715566][T18315] kmem_cache_alloc_trace+0x47/0x2d0 [ 1800.720868][T18315] sctp_add_bind_addr+0x8c/0x370 [ 1800.725822][T18315] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1800.731474][T18315] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1800.736952][T18315] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1800.742854][T18315] sctp_bind_addr_copy+0xde/0x460 [ 1800.747893][T18315] sctp_connect_new_asoc+0x1cd/0x770 [ 1800.749712][T18319] bond129 (uninitialized): Released all slaves [ 1800.753187][T18315] ? sctp_bind+0xd0/0xd0 [ 1800.753220][T18315] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1800.769467][T18315] ? sctp_get_af_specific+0x51/0x60 [ 1800.772519][T18320] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1800.774671][T18315] __sctp_connect+0x3e2/0xc00 [ 1800.787390][T18315] ? sctp_connect_new_asoc+0x770/0x770 [ 1800.792864][T18315] ? security_sctp_bind_connect+0x8f/0xc0 [ 1800.798601][T18315] __sctp_setsockopt_connectx+0xfa/0x140 [ 1800.798621][T18315] sctp_getsockopt+0x16dc/0x6d0a [ 1800.798646][T18315] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1800.815433][T18315] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1800.821449][T18315] ? _parse_integer+0x132/0x180 [ 1800.826310][T18315] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1800.832561][T18315] ? lock_acquire+0x1f1/0xad0 [ 1800.837239][T18315] ? do_dup2+0x520/0x520 [ 1800.841521][T18315] ? __fget_files+0x272/0x400 [ 1800.846207][T18315] ? lock_is_held_type+0xbb/0xf0 [ 1800.851149][T18315] ? lock_downgrade+0x830/0x830 [ 1800.856011][T18315] ? aa_sk_perm+0x316/0xaa0 [ 1800.860526][T18315] ? aa_af_perm+0x230/0x230 [ 1800.865065][T18315] ? sock_def_destruct+0x10/0x10 [ 1800.870010][T18315] __sys_getsockopt+0x219/0x4c0 [ 1800.874864][T18315] ? vfs_write+0x1b0/0x6b0 [ 1800.879307][T18315] ? __ia32_sys_setsockopt+0x150/0x150 [ 1800.884795][T18315] ? fput_many+0x2f/0x1a0 [ 1800.889132][T18315] ? syscall_enter_from_user_mode+0x20/0x290 [ 1800.895117][T18315] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1800.901104][T18315] __x64_sys_getsockopt+0xba/0x150 [ 1800.906218][T18315] ? syscall_enter_from_user_mode+0x20/0x290 [ 1800.912220][T18315] do_syscall_64+0x2d/0x70 [ 1800.916675][T18315] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1800.922569][T18315] RIP: 0033:0x45ce69 [ 1800.926467][T18315] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1800.946331][T18315] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1800.954746][T18315] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1800.962716][T18315] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1800.970685][T18315] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1800.978660][T18315] R10: 0000000020000000 R11: 0000000000000246 R12: 000000000000000a 03:23:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000020000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x100000000000000}}]}, 0x30}}, 0x0) 03:23:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000ffffa888000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1800.986624][T18315] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:18 executing program 2 (fault-call:2 fault-nth:11): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1801.054458][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 03:23:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) [ 1801.139800][T18320] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000030000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1801.278789][T18367] FAULT_INJECTION: forcing a failure. [ 1801.278789][T18367] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.376507][T18367] CPU: 0 PID: 18367 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1801.384869][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1801.394919][T18367] Call Trace: [ 1801.398214][T18367] dump_stack+0x18f/0x20d [ 1801.402578][T18367] should_fail.cold+0x5/0x14 [ 1801.407190][T18367] should_failslab+0x5/0xf [ 1801.411610][T18367] kmem_cache_alloc_trace+0x47/0x2d0 [ 1801.416908][T18367] sctp_add_bind_addr+0x8c/0x370 [ 1801.421869][T18367] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1801.427517][T18367] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1801.432995][T18367] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1801.438906][T18367] sctp_bind_addr_copy+0xde/0x460 [ 1801.443946][T18367] sctp_connect_new_asoc+0x1cd/0x770 [ 1801.449240][T18367] ? sctp_bind+0xd0/0xd0 [ 1801.453497][T18367] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1801.459396][T18367] ? sctp_get_af_specific+0x51/0x60 [ 1801.464610][T18367] __sctp_connect+0x3e2/0xc00 [ 1801.469307][T18367] ? sctp_connect_new_asoc+0x770/0x770 [ 1801.474823][T18367] ? security_sctp_bind_connect+0x8f/0xc0 [ 1801.480561][T18367] __sctp_setsockopt_connectx+0xfa/0x140 [ 1801.486388][T18367] sctp_getsockopt+0x16dc/0x6d0a [ 1801.491344][T18367] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1801.497595][T18367] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1801.503583][T18367] ? _parse_integer+0x132/0x180 [ 1801.508449][T18367] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1801.514475][T18367] ? lock_acquire+0x1f1/0xad0 [ 1801.519162][T18367] ? do_dup2+0x520/0x520 [ 1801.523435][T18367] ? __fget_files+0x272/0x400 [ 1801.528120][T18367] ? lock_is_held_type+0xbb/0xf0 [ 1801.533058][T18367] ? lock_downgrade+0x830/0x830 [ 1801.537916][T18367] ? aa_sk_perm+0x316/0xaa0 [ 1801.542425][T18367] ? aa_af_perm+0x230/0x230 [ 1801.546953][T18367] ? sock_def_destruct+0x10/0x10 [ 1801.551891][T18367] __sys_getsockopt+0x219/0x4c0 [ 1801.556748][T18367] ? vfs_write+0x1b0/0x6b0 [ 1801.561170][T18367] ? __ia32_sys_setsockopt+0x150/0x150 [ 1801.566631][T18367] ? fput_many+0x2f/0x1a0 [ 1801.570971][T18367] ? syscall_enter_from_user_mode+0x20/0x290 [ 1801.576957][T18367] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1801.582955][T18367] __x64_sys_getsockopt+0xba/0x150 [ 1801.588070][T18367] ? syscall_enter_from_user_mode+0x20/0x290 [ 1801.594057][T18367] do_syscall_64+0x2d/0x70 [ 1801.598475][T18367] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1801.604379][T18367] RIP: 0033:0x45ce69 [ 1801.608272][T18367] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1801.627881][T18367] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1801.636293][T18367] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1801.644263][T18367] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1801.652238][T18367] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1801.660207][T18367] R10: 0000000020000000 R11: 0000000000000246 R12: 000000000000000b [ 1801.668201][T18367] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000ffffff9e000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x200000000000000}}]}, 0x30}}, 0x0) 03:23:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000040000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:18 executing program 2 (fault-call:2 fault-nth:12): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000fffffff0000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) recvmmsg(r2, &(0x7f0000000240)=[{{&(0x7f0000000100)=@tipc=@name, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/205, 0xcd}], 0x1, &(0x7f00000004c0)=""/156, 0x9c}, 0x9}], 0x1, 0x10000, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000ab80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x140d4}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) [ 1802.024067][T18415] FAULT_INJECTION: forcing a failure. [ 1802.024067][T18415] name failslab, interval 1, probability 0, space 0, times 0 [ 1802.106212][T18415] CPU: 1 PID: 18415 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1802.114594][T18415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.124681][T18415] Call Trace: [ 1802.127983][T18415] dump_stack+0x18f/0x20d [ 1802.132350][T18415] should_fail.cold+0x5/0x14 [ 1802.136957][T18415] should_failslab+0x5/0xf [ 1802.141379][T18415] kmem_cache_alloc_trace+0x47/0x2d0 [ 1802.146675][T18415] sctp_add_bind_addr+0x8c/0x370 [ 1802.151623][T18415] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1802.157272][T18415] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1802.162745][T18415] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1802.168649][T18415] sctp_bind_addr_copy+0xde/0x460 [ 1802.173691][T18415] sctp_connect_new_asoc+0x1cd/0x770 [ 1802.178979][T18415] ? sctp_bind+0xd0/0xd0 [ 1802.183228][T18415] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1802.189126][T18415] ? sctp_get_af_specific+0x51/0x60 [ 1802.194335][T18415] __sctp_connect+0x3e2/0xc00 [ 1802.199024][T18415] ? sctp_connect_new_asoc+0x770/0x770 [ 1802.204495][T18415] ? security_sctp_bind_connect+0x8f/0xc0 [ 1802.210223][T18415] __sctp_setsockopt_connectx+0xfa/0x140 [ 1802.215861][T18415] sctp_getsockopt+0x16dc/0x6d0a [ 1802.220819][T18415] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1802.227065][T18415] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1802.233076][T18415] ? _parse_integer+0x132/0x180 [ 1802.237933][T18415] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1802.243924][T18415] ? lock_acquire+0x1f1/0xad0 [ 1802.248612][T18415] ? do_dup2+0x520/0x520 [ 1802.252857][T18415] ? __fget_files+0x272/0x400 [ 1802.257545][T18415] ? lock_is_held_type+0xbb/0xf0 [ 1802.262484][T18415] ? lock_downgrade+0x830/0x830 [ 1802.267387][T18415] ? aa_sk_perm+0x316/0xaa0 [ 1802.271897][T18415] ? aa_af_perm+0x230/0x230 [ 1802.276421][T18415] ? sock_def_destruct+0x10/0x10 [ 1802.281361][T18415] __sys_getsockopt+0x219/0x4c0 [ 1802.286236][T18415] ? vfs_write+0x1b0/0x6b0 [ 1802.290669][T18415] ? __ia32_sys_setsockopt+0x150/0x150 [ 1802.296162][T18415] ? fput_many+0x2f/0x1a0 [ 1802.300501][T18415] ? syscall_enter_from_user_mode+0x20/0x290 [ 1802.306483][T18415] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1802.312491][T18415] __x64_sys_getsockopt+0xba/0x150 [ 1802.317639][T18415] ? syscall_enter_from_user_mode+0x20/0x290 [ 1802.323622][T18415] do_syscall_64+0x2d/0x70 [ 1802.328038][T18415] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1802.333929][T18415] RIP: 0033:0x45ce69 [ 1802.337830][T18415] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:23:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000088a8ffff000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000050000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1802.357436][T18415] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1802.365855][T18415] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1802.373830][T18415] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1802.381805][T18415] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1802.389780][T18415] R10: 0000000020000000 R11: 0000000000000246 R12: 000000000000000c [ 1802.397760][T18415] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000f0ffff000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x300000000000000}}]}, 0x30}}, 0x0) [ 1802.436245][T18419] validate_nla: 1 callbacks suppressed [ 1802.436255][T18419] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x400000000000000}}]}, 0x30}}, 0x0) [ 1802.704848][T18419] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1802.728309][ T29] audit: type=1804 audit(1596943399.720:1590): pid=18446 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1928/cgroup.controllers" dev="sda1" ino=16363 res=1 03:23:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300007fffffff000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000060000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:19 executing program 2 (fault-call:2 fault-nth:13): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x500000000000000}}]}, 0x30}}, 0x0) 03:23:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x600000000000000}}]}, 0x30}}, 0x0) [ 1803.043764][T18487] FAULT_INJECTION: forcing a failure. [ 1803.043764][T18487] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.067724][T18489] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1803.123561][T18487] CPU: 0 PID: 18487 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1803.131906][T18487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1803.141957][T18487] Call Trace: [ 1803.145258][T18487] dump_stack+0x18f/0x20d [ 1803.150207][T18487] should_fail.cold+0x5/0x14 [ 1803.154812][T18487] should_failslab+0x5/0xf [ 1803.159244][T18487] kmem_cache_alloc_trace+0x47/0x2d0 [ 1803.164540][T18487] sctp_add_bind_addr+0x8c/0x370 [ 1803.169493][T18487] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1803.175145][T18487] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1803.180621][T18487] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1803.186526][T18487] sctp_bind_addr_copy+0xde/0x460 [ 1803.191573][T18487] sctp_connect_new_asoc+0x1cd/0x770 [ 1803.196869][T18487] ? sctp_bind+0xd0/0xd0 [ 1803.201119][T18487] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1803.207017][T18487] ? sctp_get_af_specific+0x51/0x60 [ 1803.212227][T18487] __sctp_connect+0x3e2/0xc00 [ 1803.216918][T18487] ? sctp_connect_new_asoc+0x770/0x770 [ 1803.222391][T18487] ? security_sctp_bind_connect+0x8f/0xc0 [ 1803.228124][T18487] __sctp_setsockopt_connectx+0xfa/0x140 [ 1803.233771][T18487] sctp_getsockopt+0x16dc/0x6d0a [ 1803.238761][T18487] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1803.245010][T18487] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1803.251008][T18487] ? _parse_integer+0x132/0x180 [ 1803.255868][T18487] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1803.261865][T18487] ? lock_acquire+0x1f1/0xad0 [ 1803.266549][T18487] ? do_dup2+0x520/0x520 [ 1803.270801][T18487] ? __fget_files+0x272/0x400 [ 1803.275489][T18487] ? lock_is_held_type+0xbb/0xf0 [ 1803.280427][T18487] ? lock_downgrade+0x830/0x830 [ 1803.285377][T18487] ? aa_sk_perm+0x316/0xaa0 [ 1803.289885][T18487] ? aa_af_perm+0x230/0x230 [ 1803.294505][T18487] ? sock_def_destruct+0x10/0x10 [ 1803.299443][T18487] __sys_getsockopt+0x219/0x4c0 [ 1803.304299][T18487] ? vfs_write+0x1b0/0x6b0 [ 1803.308719][T18487] ? __ia32_sys_setsockopt+0x150/0x150 [ 1803.314184][T18487] ? fput_many+0x2f/0x1a0 [ 1803.318522][T18487] ? syscall_enter_from_user_mode+0x20/0x290 [ 1803.324506][T18487] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1803.330492][T18487] __x64_sys_getsockopt+0xba/0x150 [ 1803.335609][T18487] ? syscall_enter_from_user_mode+0x20/0x290 [ 1803.341593][T18487] do_syscall_64+0x2d/0x70 [ 1803.346015][T18487] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1803.351909][T18487] RIP: 0033:0x45ce69 03:23:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@null=' \x00', 0x7, 'veth1_to_hsr\x00'}) bind(r0, &(0x7f00000002c0)=@x25={0x9, @remote={[], 0x1}}, 0x80) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000140)=ANY=[@ANYBLOB="38f7ffff5f596312140100000000fff800000008000300f000060000004f0000a07a791100030008001500"], 0x38}}, 0x0) 03:23:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000080000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300009effffff000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1803.355808][T18487] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1803.375422][T18487] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1803.383843][T18487] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1803.391844][T18487] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1803.399824][T18487] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1803.407800][T18487] R10: 0000000020000000 R11: 0000000000000246 R12: 000000000000000d [ 1803.415780][T18487] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000090000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000f0ffffff000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x800000000000000}}]}, 0x30}}, 0x0) 03:23:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612239c24a0000", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@local, 0x0, r3}) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x80, 0x1, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20044004) 03:23:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000000000a0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1803.675259][T18523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 03:23:20 executing program 2 (fault-call:2 fault-nth:14): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1803.756294][T18523] device bond129 entered promiscuous mode [ 1803.784015][T18523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1803.836838][T18489] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1803.879162][T18571] FAULT_INJECTION: forcing a failure. [ 1803.879162][T18571] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.892603][T18571] CPU: 1 PID: 18571 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1803.900933][T18571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1803.910981][T18571] Call Trace: [ 1803.914279][T18571] dump_stack+0x18f/0x20d [ 1803.918623][T18571] should_fail.cold+0x5/0x14 [ 1803.923227][T18571] should_failslab+0x5/0xf [ 1803.927646][T18571] kmem_cache_alloc_trace+0x47/0x2d0 [ 1803.932941][T18571] sctp_add_bind_addr+0x8c/0x370 [ 1803.937893][T18571] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1803.943537][T18571] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1803.949008][T18571] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1803.954910][T18571] sctp_bind_addr_copy+0xde/0x460 [ 1803.959951][T18571] sctp_connect_new_asoc+0x1cd/0x770 [ 1803.965277][T18571] ? sctp_bind+0xd0/0xd0 [ 1803.969539][T18571] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1803.975465][T18571] ? sctp_get_af_specific+0x51/0x60 [ 1803.980682][T18571] __sctp_connect+0x3e2/0xc00 [ 1803.985373][T18571] ? sctp_connect_new_asoc+0x770/0x770 [ 1803.990871][T18571] ? security_sctp_bind_connect+0x8f/0xc0 [ 1803.996605][T18571] __sctp_setsockopt_connectx+0xfa/0x140 [ 1804.002252][T18571] sctp_getsockopt+0x16dc/0x6d0a [ 1804.007209][T18571] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1804.013466][T18571] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1804.019456][T18571] ? _parse_integer+0x132/0x180 [ 1804.024323][T18571] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1804.030337][T18571] ? lock_acquire+0x1f1/0xad0 [ 1804.035017][T18571] ? do_dup2+0x520/0x520 [ 1804.039263][T18571] ? __fget_files+0x272/0x400 [ 1804.043946][T18571] ? lock_is_held_type+0xbb/0xf0 [ 1804.048910][T18571] ? lock_downgrade+0x830/0x830 [ 1804.053782][T18571] ? aa_sk_perm+0x316/0xaa0 [ 1804.058294][T18571] ? aa_af_perm+0x230/0x230 [ 1804.062817][T18571] ? sock_def_destruct+0x10/0x10 [ 1804.067868][T18571] __sys_getsockopt+0x219/0x4c0 [ 1804.072725][T18571] ? vfs_write+0x1b0/0x6b0 [ 1804.077145][T18571] ? __ia32_sys_setsockopt+0x150/0x150 [ 1804.082604][T18571] ? fput_many+0x2f/0x1a0 [ 1804.086942][T18571] ? syscall_enter_from_user_mode+0x20/0x290 [ 1804.092925][T18571] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1804.098908][T18571] __x64_sys_getsockopt+0xba/0x150 [ 1804.104047][T18571] ? syscall_enter_from_user_mode+0x20/0x290 [ 1804.110049][T18571] do_syscall_64+0x2d/0x70 [ 1804.114467][T18571] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1804.120381][T18571] RIP: 0033:0x45ce69 [ 1804.124275][T18571] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1804.143880][T18571] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1804.152293][T18571] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1804.160267][T18571] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1804.168238][T18571] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1804.176207][T18571] R10: 0000000020000000 R11: 0000000000000246 R12: 000000000000000e [ 1804.184208][T18571] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c [ 1804.200770][ T29] audit: type=1800 audit(1596943401.200:1591): pid=18494 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=16358 res=0 03:23:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x900000000000000}}]}, 0x30}}, 0x0) 03:23:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000070000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000000000c0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:21 executing program 2 (fault-call:2 fault-nth:15): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601010000000000000000000000000500010006"], 0x1c}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4c}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="e2315d9d0c9f3e00"], 0x4c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r10 = accept4$inet6(r9, &(0x7f0000003600)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000003640)=0x1c, 0x0) sendmmsg$unix(r1, &(0x7f00000036c0)=[{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000200)="5bbc37831bebe65ddfd6245ea83103f685fe13489b5d0924eff218212d7835d7198650d4e5c856bba12ddf62aed9822e8b6d9d2173be03175a90b2f05328db79ded18a05893b11edb57f006fed6f78518958d9d695223c246024faa3dc0054d53f0b8b576bdd1a2fa7cc8d7837adad26115a2888723884b056697b356a873b3188715888803903c1fff6ccc0088525f032c787b2dd4f5c", 0x97}, {&(0x7f00000002c0)="2b74e6033f0d9304ac5beefb45c9b2e8ce03cc3de85478f7a13d622a2b49a74d44cd4bbcf4d63f310a737dac47b853398311ace70d6208eb46f287b1b76391c8a3bcd0950c3914c97dbe6c845741575fdaa35a5d1f446f541aa2ab7826939cf3ff0cff205170032ebc220d308a77126a80aac969b0cc5f887fb0d18cd61055c85f31592e91d1e26866c034c43d2189ff7b06c575af32d713e79e3df85e5af8f0d7965875a43ff644675042dc589ebd0ef774c3dd7e6c2dba8e8bde69c143d9ae20a89ae45b949d82637e4eecdd5ecdc8", 0xd0}, {&(0x7f0000000480)="5f0bd82596d257f320e41fa034f38a1d86a3e3fcfc4d50ec2ac143719f7b31cf378547969cca5837c2840c1227b0d7de20a5304e4764f54a912c3c52b466ddbe0708e30ca0a71ed7dc98929574e9c81509d5dedf0adba8477efdefd48d2d52d6691032edeb57a21989a492355b104e77c3afd8b7b38c6200668443f70c58dfb8e9ce338aa2c5a2efa6ae4e71555e890770b07de873eaf1bde59da6bc7a5e4f3c215e501541c58a90b4b4b4042b5a0bfa86d4a4bfa38e0377ee6cb801d5c4c0000eac73c9d5e1eacb2afe1b7ac39a99b66d2bb5485cd3adc311524c14d434", 0xde}, {&(0x7f0000000580)="a23b8c6f09b6e38b6227e1e8c1c8371575da28643da976c5c6a119fd0cc8d99edbe093b0cbffdc5710cc51e6ea4eeb1337245f756ab81f49db864d8097a163a0b42f509a1ec10ff0421cd32390cf5aabb0641821a1549448b0398c13979e4657712f89271efa1786b58d614c5742de12dd47ef98f712fbf20c405e22ed2076c22fe73807924de1cb2e54584fc398d9119a99a34674d8db1c4aa488", 0x9b}, {&(0x7f0000000040)="d49cb3e1a03f6569b25d16af1322813fe3f8f7623737fdb49e", 0x19}, {&(0x7f00000003c0)="373f582bc7efc4297489b14c1be82e45f40147a90c30f89e811fb54336d86c08ee873c06f307e9dc90059615b42e52fe80a59195550d48c03d47934e6f236b557b5466f4f6d5b19a0a62fe7f26e9a5ee3f13e134a0610ba56a499116e76d027491", 0x61}], 0x6, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x20044000}, {&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a00)="a476191c4e9677b2986468ff12680457bdd2d5a13154c7106d8220d9764bf97477ecb568d73b9c99aaee1c937eae77ce12415fa79fe8c403991766a080069e19517c56cdfcae4c6589e350f41af2ea17dafedd0a40a6216e73dfc90a7e836320b122e126b7541f2c0357c0bae017e959056a0ba1481861", 0x77}, {&(0x7f0000000a80)="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", 0xfc}, {&(0x7f0000000b80)="423534549417f94bad5e1e79ed7693a5e6603083b9ac102cb923fd2af02c2a4a4de1b05e83e52eb8d2b081995f11468901e976a8b4e638dd35148f683b6a6ac6687a4f91c93e0567e974050f7b16c9fec08f58904b4d2f832972acb56248b5f32ca732d19035a25bc3bfa5a7d025ce4238a95b5ba5c3fa133f95ee1696678b7c20e2150703046521fd80a8156a90e6453474dd57ad7490e74f1374fc509b7971326eb53583e29413e2d3", 0xaa}], 0x3, &(0x7f0000000d00)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, r4]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0xa0, 0x4040}, {&(0x7f0000000dc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000e40)="0700c9c78969ff70a2c2742141059cddc80dcdeeff2094e1d8353063ccae1e727a39463d5a4f8205acca2c506e739d57bdc9f49c35cdc32615a3829a6e7972f8e7cb7543", 0x44}, {&(0x7f0000000ec0)="e88501d9fd851163462aa7c8efc19667649e641879951dc4b3eb905d8ed06a8384523e5b35969f20ca2df6466cbabeef6e4f561f03fffc93024f29ea181987d323ac9a332d3699363ed7103717bd63677c5f7b0dda6905cd084aeb30f77acb7adac60ce6804968aebe518423f1d69bc7f6e3a287a77bc4767c6dad4534095b3305e3f3b545100d9c42ef5d5c865fef43c375e3a0fbd753be6515d68f474e3a64448939b4a46b500e0c457974b3a760a91aa81083ae7799668fcee67df7a30201949aad9c827c579d5b6b98f51693b8be5a2461ab8e9e6637efe7d22e3ab027ae339c32c5701a410dee7ffa5c1f405f035a9c93bb72ff8c", 0xf7}], 0x2, 0x0, 0x0, 0x8000}, {&(0x7f0000001000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000001080)="4aed75a8852c11e27402e3284fa92b4b3f499d88a2a55ef1d328c2f89689680c9d2b9a5877ad20b219c47c10eb7279c5170da5acabf4e04a143a1ecd08a23b9e02c9dda454716aaef3662bb0349e66ba3e013aa4626826c0c4abaf0511df7d47bf4f5e67933faa132b4c058c022cc826c3833f1ae42a394ff8b41863e8e539fa8782479e6cc6634386eda65347aa81", 0x8f}, {&(0x7f0000001140)="a7b74f814f7e4f82dcacd6086a1a3864a6e2488a458a2721f774bc079a1bb47d43c212528d8e660da476cc44cf082a522231c0c1b913af8078f1647597536900b46c01c4bf53239c4a7ce87f39e0b220f14296cea049fcc1dbeb33e7888e4fc90e99f38335cdaa5f258008389368d4b955be72af88103026d3317440acf5ffecafe9c9c631aec03c0fb0164fcac02c177ecdec6e547c644e620835f1d9ea1249f5c7a9e621be09d78d71ac213f3dec2db027461a6d5343fc06", 0xb9}], 0x2, &(0x7f0000001300)=[@cred={{0x1c}}], 0x20, 0x20000004}, {&(0x7f0000001340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003580)=[{&(0x7f00000013c0)="f7dff0d8eeddcd035731b3863c4c6fe02056543a7e569be206333c12343ec22f3ff1793130a2b156a0dea2714063cf910539adbaaafd46", 0x37}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="347a30977a1f64c2eeba7a12d2f7dd54d601aadbe2fff9f905d0966c07fa5c0577b5", 0x22}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="123900e0534ffb837a8b6b7646727d2df0d00961ef574d10a25a88b2d59b2aa57d28a9e50dfe0c18cccaeb675376afdb7b71c8345930ed79c80c65cb5522702b6fa6c2eb07c74d4a9056f5dbce6563c71463670bc37add8653d315ecd47673a599fca185", 0x64}, {&(0x7f00000034c0)="23216c554a6b466b1ec0658b4cb60630682c4ff98204bedad651d01e47e6b6fb67179c38fa44dee95a68780160547c3450cc18ae", 0x34}, {&(0x7f0000003500)="91eaa394dd808ef937c7292bf0138a81476f703e474c46bae6370723922ed294b21a3c66dd8f6f6fea9123d1eab93ee0bef014f3b7697c03212c464d71cd0945a91d257ba9e669881f47", 0x4a}], 0x7, &(0x7f0000003680)=[@rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r7, r10, r1]}}], 0x28, 0x20040010}], 0x5, 0x80) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030700000000000000000100000004000180"], 0x18}}, 0x0) 03:23:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000000000e0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1804.390035][T18598] FAULT_INJECTION: forcing a failure. [ 1804.390035][T18598] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.421620][T18603] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1804.466740][T18598] CPU: 1 PID: 18598 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1804.475075][T18598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1804.485126][T18598] Call Trace: [ 1804.488422][T18598] dump_stack+0x18f/0x20d [ 1804.490555][T18607] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1804.492758][T18598] should_fail.cold+0x5/0x14 [ 1804.492783][T18598] should_failslab+0x5/0xf [ 1804.492806][T18598] kmem_cache_alloc_trace+0x47/0x2d0 [ 1804.515124][T18598] sctp_add_bind_addr+0x8c/0x370 [ 1804.520069][T18598] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1804.525718][T18598] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1804.531187][T18598] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1804.537085][T18598] sctp_bind_addr_copy+0xde/0x460 [ 1804.542148][T18598] sctp_connect_new_asoc+0x1cd/0x770 [ 1804.547439][T18598] ? sctp_bind+0xd0/0xd0 [ 1804.551696][T18598] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1804.557593][T18598] ? sctp_get_af_specific+0x51/0x60 [ 1804.562800][T18598] __sctp_connect+0x3e2/0xc00 [ 1804.567497][T18598] ? sctp_connect_new_asoc+0x770/0x770 [ 1804.572968][T18598] ? security_sctp_bind_connect+0x8f/0xc0 [ 1804.578692][T18598] __sctp_setsockopt_connectx+0xfa/0x140 [ 1804.584337][T18598] sctp_getsockopt+0x16dc/0x6d0a [ 1804.589285][T18598] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1804.595550][T18598] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1804.601533][T18598] ? _parse_integer+0x132/0x180 [ 1804.606399][T18598] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1804.607604][T18603] device  entered promiscuous mode [ 1804.612383][T18598] ? lock_acquire+0x1f1/0xad0 [ 1804.612406][T18598] ? do_dup2+0x520/0x520 [ 1804.612424][T18598] ? __fget_files+0x272/0x400 [ 1804.612444][T18598] ? lock_is_held_type+0xbb/0xf0 [ 1804.612457][T18598] ? lock_downgrade+0x830/0x830 [ 1804.612478][T18598] ? aa_sk_perm+0x316/0xaa0 [ 1804.612496][T18598] ? aa_af_perm+0x230/0x230 [ 1804.612527][T18598] ? sock_def_destruct+0x10/0x10 [ 1804.612539][T18598] __sys_getsockopt+0x219/0x4c0 [ 1804.612556][T18598] ? vfs_write+0x1b0/0x6b0 [ 1804.612570][T18598] ? __ia32_sys_setsockopt+0x150/0x150 [ 1804.612583][T18598] ? fput_many+0x2f/0x1a0 [ 1804.612601][T18598] ? syscall_enter_from_user_mode+0x20/0x290 [ 1804.612624][T18598] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1804.626730][T18598] __x64_sys_getsockopt+0xba/0x150 [ 1804.644841][T18606] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1804.645680][T18598] ? syscall_enter_from_user_mode+0x20/0x290 [ 1804.645698][T18598] do_syscall_64+0x2d/0x70 [ 1804.645713][T18598] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1804.645725][T18598] RIP: 0033:0x45ce69 [ 1804.645748][T18598] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1804.738989][T18598] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1804.747434][T18598] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1804.755411][T18598] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 03:23:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xa00000000000000}}]}, 0x30}}, 0x0) 03:23:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000340000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0xe}, 0x10}, 0x78) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe80, 0x0, &(0x7f0000000540)="8d14fb003092bd81ed4e5b534c5747c8", 0x0, 0x1000}, 0x28) [ 1804.763411][T18598] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1804.771383][T18598] R10: 0000000020000000 R11: 0000000000000246 R12: 000000000000000f [ 1804.779360][T18598] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000000000f0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:21 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xb4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(0x0) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000009180)={&(0x7f0000000580)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="b5452bbd7000fedbdf25100000000400028034000180060002000c000000060004004e220000060004000000000008000b0073697000070006006e71000008000b007369700008000400000000000800060000000000040002800c000180060804004e210000080006000100ffff62651e4dd26d128702ea4ec95f6a1fd82ef7b8bfa382fa9af04eb529c19c8bdf01e663d721e0252188bd846af28e9860fb374cac91e5db3a109e441225b6752aaf3b7571f08d66c31fa7ffdce5ff554dbefb1dda880b89fb21e6a2ec7032de2628b2939efa30cccffaa11c08e446568702"], 0x74}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1a04bb333631141b5db8e2be67e0ae154ff2573b33f68343ef4ceff9137bcfc16de145f6216d29a4d7494f720ae5638a91a4d3551371b9803b251eb39c3ce86aab432ab018d14e5621c0a81a1a1bd2eb80", @ANYRES16=0x0, @ANYBLOB="28002bbd7000000000008a0000004400038005000800810000000000050000000000080001000100000014000600e8710d9b7e1b02ff010000000000000000000000000001140002006d6163766c616e30000000000000000008000600ffffffff08000600ed0300000c0001800600010002000000a0ff0500ffffffff"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 1805.022084][ T29] audit: type=1804 audit(1596943402.020:1592): pid=18640 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1933/memory.events" dev="sda1" ino=16377 res=1 [ 1805.123755][ T29] audit: type=1800 audit(1596943402.020:1593): pid=18640 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16377 res=0 [ 1805.152895][ T29] audit: type=1804 audit(1596943402.020:1594): pid=18640 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1933/memory.events" dev="sda1" ino=16377 res=1 [ 1805.181061][ T29] audit: type=1804 audit(1596943402.060:1595): pid=18640 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1933/memory.events" dev="sda1" ino=16377 res=1 [ 1805.205268][T18607] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1805.280544][ T29] audit: type=1800 audit(1596943402.080:1596): pid=18640 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16377 res=0 [ 1805.320938][ T29] audit: type=1804 audit(1596943402.080:1597): pid=18641 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1933/memory.events" dev="sda1" ino=16377 res=1 [ 1805.345777][ T29] audit: type=1804 audit(1596943402.090:1598): pid=18641 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1933/memory.events" dev="sda1" ino=16377 res=1 03:23:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xc00000000000000}}]}, 0x30}}, 0x0) 03:23:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000100000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000fffffffffffff0000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:22 executing program 2 (fault-call:2 fault-nth:16): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:22 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba0800002a00fb"], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) r2 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) clock_gettime(0x0, &(0x7f0000004740)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000080)=""/233, 0xe9}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000001340)=""/65, 0x41}], 0x6, &(0x7f0000001440)=""/38, 0x26}, 0x1f}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001480)=""/32, 0x20}, {&(0x7f00000014c0)=""/5, 0x5}], 0x2, &(0x7f0000001540)}, 0x4}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001600)=""/245, 0xf5}, {&(0x7f0000001700)=""/203, 0xcb}, {&(0x7f0000001800)=""/253, 0xfd}], 0x3, &(0x7f0000001940)=""/193, 0xc1}, 0xaf95}, {{&(0x7f0000001a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001ac0)=""/106, 0x6a}, {&(0x7f0000001b40)=""/167, 0xa7}, {&(0x7f0000001c00)=""/105, 0x69}], 0x3, &(0x7f0000001cc0)=""/100, 0x64}, 0x6dd7aa8f}, {{&(0x7f0000001d40)=@x25={0x9, @remote}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001dc0)=""/169, 0xa9}, {&(0x7f0000001e80)=""/233, 0xe9}, {&(0x7f0000001f80)=""/174, 0xae}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x4, &(0x7f0000003080)=""/112, 0x70}, 0xfffffffa}, {{&(0x7f0000003100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003180)=""/34, 0x22}], 0x1, &(0x7f0000003200)=""/148, 0x94}, 0xf38}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f00000032c0)=""/20, 0x14}, {&(0x7f0000003300)=""/97, 0x61}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/84, 0x54}, {&(0x7f0000004400)=""/204, 0xcc}], 0x5}, 0x5}], 0x7, 0x0, &(0x7f0000004780)={r4, r5+10000000}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004800)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f00000048c0)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004880)={&(0x7f0000004840)={0x28, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4008001) splice(r0, 0x0, r2, 0x0, 0x847fda, 0x0) 03:23:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000014270000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1805.511719][T18681] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1805.556346][T18687] FAULT_INJECTION: forcing a failure. [ 1805.556346][T18687] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.578242][T18684] netlink: 2198 bytes leftover after parsing attributes in process `syz-executor.3'. 03:23:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xe00000000000000}}]}, 0x30}}, 0x0) [ 1805.642668][T18687] CPU: 1 PID: 18687 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1805.651108][T18687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1805.661161][T18687] Call Trace: [ 1805.664460][T18687] dump_stack+0x18f/0x20d [ 1805.668801][T18687] should_fail.cold+0x5/0x14 [ 1805.673409][T18687] should_failslab+0x5/0xf [ 1805.677832][T18687] kmem_cache_alloc_trace+0x47/0x2d0 [ 1805.683122][T18687] sctp_add_bind_addr+0x8c/0x370 03:23:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xf00000000000000}}]}, 0x30}}, 0x0) [ 1805.688096][T18687] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1805.693735][T18687] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1805.699209][T18687] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1805.705115][T18687] sctp_bind_addr_copy+0xde/0x460 [ 1805.710152][T18687] sctp_connect_new_asoc+0x1cd/0x770 [ 1805.715441][T18687] ? sctp_bind+0xd0/0xd0 [ 1805.719713][T18687] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1805.725607][T18687] ? sctp_get_af_specific+0x51/0x60 [ 1805.731423][T18687] __sctp_connect+0x3e2/0xc00 [ 1805.736644][T18687] ? sctp_connect_new_asoc+0x770/0x770 [ 1805.742124][T18687] ? security_sctp_bind_connect+0x8f/0xc0 [ 1805.747886][T18687] __sctp_setsockopt_connectx+0xfa/0x140 [ 1805.753549][T18687] sctp_getsockopt+0x16dc/0x6d0a [ 1805.758506][T18687] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1805.764756][T18687] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1805.770741][T18687] ? _parse_integer+0x132/0x180 [ 1805.775598][T18687] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1805.783785][T18687] ? lock_acquire+0x1f1/0xad0 [ 1805.788480][T18687] ? do_dup2+0x520/0x520 03:23:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x1000000000000000}}]}, 0x30}}, 0x0) [ 1805.792726][T18687] ? __fget_files+0x272/0x400 [ 1805.797412][T18687] ? lock_is_held_type+0xbb/0xf0 [ 1805.802383][T18687] ? lock_downgrade+0x830/0x830 [ 1805.807249][T18687] ? aa_sk_perm+0x316/0xaa0 [ 1805.811761][T18687] ? aa_af_perm+0x230/0x230 [ 1805.816316][T18687] ? sock_def_destruct+0x10/0x10 [ 1805.821252][T18687] __sys_getsockopt+0x219/0x4c0 [ 1805.826127][T18687] ? vfs_write+0x1b0/0x6b0 [ 1805.830570][T18687] ? __ia32_sys_setsockopt+0x150/0x150 [ 1805.836078][T18687] ? fput_many+0x2f/0x1a0 03:23:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x3f00000000000000}}]}, 0x30}}, 0x0) [ 1805.840613][T18687] ? syscall_enter_from_user_mode+0x20/0x290 [ 1805.846690][T18687] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1805.854186][T18687] __x64_sys_getsockopt+0xba/0x150 [ 1805.859441][T18687] ? syscall_enter_from_user_mode+0x20/0x290 [ 1805.865425][T18687] do_syscall_64+0x2d/0x70 [ 1805.869849][T18687] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1805.875741][T18687] RIP: 0033:0x45ce69 [ 1805.879636][T18687] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1805.899255][T18687] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1805.907669][T18687] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1805.915638][T18687] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1805.923609][T18687] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1805.932103][T18687] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000010 03:23:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x6000000000000000}}]}, 0x30}}, 0x0) [ 1805.940078][T18687] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c [ 1806.090050][T18681] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000000003f0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000010000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:23 executing program 2 (fault-call:2 fault-nth:17): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x6558000000000000}}]}, 0x30}}, 0x0) 03:23:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:23 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d400000090003b0e00fffffffffffffff0000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000030000060003003f000000060011004e24690005001600020000000500170000000000050008000000000008000600ac14"], 0xd4}}, 0x0) r0 = socket(0x24, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="fa9bcf8df4c50088bd11ad4e91180741d6081019773c0784adf2af95e3e9705241055544b4dd2916fa0712490779555a1fb82514e4b630ede8eec9e88c5218fe5533bc5702cb27c43d6ef83012496f7572c1574d8bd4812f588c0ee30df9fccdeeced5d0723d77bbf97fd6c68005b0aefb6d8af39cc7ffa9ecfe2f35028bcb7bc8fdadb7deeb0b1857db0cc6fbb36199d5ae445d7ce7d100ca729ec9bb4d7812be32f140caa37a6ce79f9910fc495674d0588844e67a7c449ff62b784f12ea542cee9882b7d50809470bd303ea4a954605a5d781806be71c1d32f369090e66a8c29baaaaf10eeb591bbb5152521c59fd810c93", 0xf3}, {&(0x7f0000000000)="b94605f7a7cd608558ed5c23a37f9dbbb5302affb4f7219d715de9ad551987dd06cbea", 0x23}, {&(0x7f00000000c0)="e575e07084c062ff2981b79b50a763351f25bb63b76817598538c86dff09575d5f28c3de5f876663087aefa53bc04975d4cd9b486120294dadcd4519c2018f56f1f86ae1cb68ceb1fa1f594331fc52e0ad213166da2675c484dba06137", 0x5d}], 0x3, &(0x7f00000002c0)=[{0x68, 0x114, 0x20, "341565d98c417532e87783ea94ff61b4896882fea099e2a529bde90249780a50268a076c03fbbdafc4723ca1342b798ede110186653234a7c9481e543102f199c9b3fa2b656a7b8f2665f5ee73f3ff2a9bd9074688d1"}, {0x50, 0x105, 0x2, "d8f574f85134ae39170ae315cd3da83fc09674655df5d5e572de5d378f87c46a136b6555d8f0c536f7381a69cbe964e01e2c73869d9fcef224cc3e672b905f40"}], 0xb8}}], 0x1, 0x0) 03:23:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000020000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1806.345542][T18746] FAULT_INJECTION: forcing a failure. [ 1806.345542][T18746] name failslab, interval 1, probability 0, space 0, times 0 03:23:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x8100000000000000}}]}, 0x30}}, 0x0) [ 1806.415704][T18746] CPU: 1 PID: 18746 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1806.424060][T18746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1806.434111][T18746] Call Trace: [ 1806.437407][T18746] dump_stack+0x18f/0x20d [ 1806.441746][T18746] should_fail.cold+0x5/0x14 [ 1806.446354][T18746] should_failslab+0x5/0xf [ 1806.450778][T18746] kmem_cache_alloc_trace+0x47/0x2d0 [ 1806.456078][T18746] sctp_add_bind_addr+0x8c/0x370 [ 1806.461025][T18746] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1806.466692][T18746] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1806.472179][T18746] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1806.478085][T18746] sctp_bind_addr_copy+0xde/0x460 [ 1806.483121][T18746] sctp_connect_new_asoc+0x1cd/0x770 [ 1806.488421][T18746] ? sctp_bind+0xd0/0xd0 [ 1806.492676][T18746] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1806.498580][T18746] ? sctp_get_af_specific+0x51/0x60 [ 1806.503789][T18746] __sctp_connect+0x3e2/0xc00 [ 1806.508482][T18746] ? sctp_connect_new_asoc+0x770/0x770 [ 1806.513953][T18746] ? security_sctp_bind_connect+0x8f/0xc0 [ 1806.519687][T18746] __sctp_setsockopt_connectx+0xfa/0x140 [ 1806.525341][T18746] sctp_getsockopt+0x16dc/0x6d0a [ 1806.530296][T18746] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1806.536550][T18746] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1806.542562][T18746] ? _parse_integer+0x132/0x180 [ 1806.547427][T18746] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1806.553431][T18746] ? lock_acquire+0x1f1/0xad0 [ 1806.558135][T18746] ? do_dup2+0x520/0x520 [ 1806.562394][T18746] ? __fget_files+0x272/0x400 [ 1806.567073][T18746] ? lock_is_held_type+0xbb/0xf0 [ 1806.572009][T18746] ? lock_downgrade+0x830/0x830 [ 1806.576858][T18746] ? aa_sk_perm+0x316/0xaa0 [ 1806.581381][T18746] ? aa_af_perm+0x230/0x230 [ 1806.585907][T18746] ? sock_def_destruct+0x10/0x10 [ 1806.590847][T18746] __sys_getsockopt+0x219/0x4c0 [ 1806.595713][T18746] ? vfs_write+0x1b0/0x6b0 [ 1806.600131][T18746] ? __ia32_sys_setsockopt+0x150/0x150 [ 1806.605595][T18746] ? fput_many+0x2f/0x1a0 [ 1806.609957][T18746] ? syscall_enter_from_user_mode+0x20/0x290 03:23:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x88a8ffff00000000}}]}, 0x30}}, 0x0) [ 1806.615934][T18746] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1806.621936][T18746] __x64_sys_getsockopt+0xba/0x150 [ 1806.627049][T18746] ? syscall_enter_from_user_mode+0x20/0x290 [ 1806.633032][T18746] do_syscall_64+0x2d/0x70 [ 1806.637447][T18746] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1806.643343][T18746] RIP: 0033:0x45ce69 03:23:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000600000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1806.647242][T18746] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1806.667452][T18746] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1806.675878][T18746] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1806.683860][T18746] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1806.691858][T18746] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1806.699957][T18746] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000011 [ 1806.707957][T18746] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x1f000, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000035499aac21c127a45ad96d0f7e0ad77184f36a3a9bf52312dcf397bd5dcdae4d4664c6640821bcb4e31d2b59eb63c55ba0bc19fed85a11a38239087626842b39c6aa182a47cc2b6bd95a28ca2180a4ef38b31cadad0777542c9fe7cb5e9b903af28b020419b70c16698f56c5386c1c42", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0x0, 0x10}, 0xc) 03:23:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x9effffff00000000}}]}, 0x30}}, 0x0) 03:23:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000030000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000058650000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:24 executing program 2 (fault-call:2 fault-nth:18): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000040000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1807.186224][T18839] FAULT_INJECTION: forcing a failure. [ 1807.186224][T18839] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.214678][T18839] CPU: 0 PID: 18839 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1807.223036][T18839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.233090][T18839] Call Trace: [ 1807.236387][T18839] dump_stack+0x18f/0x20d [ 1807.240726][T18839] should_fail.cold+0x5/0x14 [ 1807.245324][T18839] ? __ipv6_addr_type+0x20d/0x330 [ 1807.250361][T18839] should_failslab+0x5/0xf [ 1807.254785][T18839] kmem_cache_alloc_trace+0x47/0x2d0 [ 1807.260091][T18839] sctp_add_bind_addr+0x8c/0x370 [ 1807.265041][T18839] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1807.270720][T18839] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1807.276190][T18839] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1807.282101][T18839] sctp_bind_addr_copy+0xde/0x460 [ 1807.287164][T18839] sctp_connect_new_asoc+0x1cd/0x770 [ 1807.292465][T18839] ? sctp_bind+0xd0/0xd0 [ 1807.296728][T18839] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1807.302657][T18839] ? sctp_get_af_specific+0x51/0x60 [ 1807.307881][T18839] __sctp_connect+0x3e2/0xc00 [ 1807.312576][T18839] ? sctp_connect_new_asoc+0x770/0x770 [ 1807.318056][T18839] ? security_sctp_bind_connect+0x8f/0xc0 [ 1807.323827][T18839] __sctp_setsockopt_connectx+0xfa/0x140 [ 1807.329476][T18839] sctp_getsockopt+0x16dc/0x6d0a [ 1807.334434][T18839] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1807.340682][T18839] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1807.346691][T18839] ? _parse_integer+0x132/0x180 [ 1807.351579][T18839] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1807.357572][T18839] ? lock_acquire+0x1f1/0xad0 [ 1807.362253][T18839] ? do_dup2+0x520/0x520 [ 1807.366505][T18839] ? __fget_files+0x272/0x400 [ 1807.371195][T18839] ? lock_is_held_type+0xbb/0xf0 [ 1807.376134][T18839] ? lock_downgrade+0x830/0x830 [ 1807.380996][T18839] ? aa_sk_perm+0x316/0xaa0 [ 1807.385507][T18839] ? aa_af_perm+0x230/0x230 [ 1807.390028][T18839] ? sock_def_destruct+0x10/0x10 [ 1807.394963][T18839] __sys_getsockopt+0x219/0x4c0 [ 1807.399830][T18839] ? vfs_write+0x1b0/0x6b0 [ 1807.404532][T18839] ? __ia32_sys_setsockopt+0x150/0x150 [ 1807.409991][T18839] ? fput_many+0x2f/0x1a0 [ 1807.415199][T18839] ? syscall_enter_from_user_mode+0x20/0x290 [ 1807.421183][T18839] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1807.427167][T18839] __x64_sys_getsockopt+0xba/0x150 [ 1807.432283][T18839] ? syscall_enter_from_user_mode+0x20/0x290 [ 1807.438268][T18839] do_syscall_64+0x2d/0x70 [ 1807.442688][T18839] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1807.448588][T18839] RIP: 0033:0x45ce69 [ 1807.452489][T18839] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1807.472102][T18839] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1807.480536][T18839] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1807.488608][T18839] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1807.496590][T18839] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1807.504562][T18839] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000012 [ 1807.512538][T18839] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c 03:23:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000810000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x3, 0x12) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000003c0)="1a47172935122da3fd7518f37d2bc6703f5fec10e633b6e3ee5c6ee5d4e31f4b1510b81e2b45f1aba6174e150279cc483bb814301c3deec980d5cc73622e5324e9f53273355ed926bbd2483c1a3dd6df565f067d051d57e0c82fc53d932468b232c98c3a0e956892259ec024fba84fe5076e44a0b96d34d4da4169f78cb42b22ca1e20927fd6bbe5ed8f05723b", 0x8d}], 0x1) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x83, 0x0, 0x64, 0x40000002}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3ade0778c1325cbe7415300224699b98c51b39b1141de543ccdcc717f04bff4c641b0469ccdc539ea217660a716aa9f974b49fda46dd91b1ba5397ff3e95dda1daacc11a61d563cc7feb3b4a86cd045647a0a95bc962912dbad814e0a212a7468e47af32bf951d1f579252b20a27d0c5f2d7c3678692036fbad7e594a171e56b483fe4fa7e72ed22086516a726"], 0x1}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffffffd) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)) 03:23:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xee08000000000000}}]}, 0x30}}, 0x0) 03:23:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000050000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:24 executing program 2 (fault-call:2 fault-nth:19): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000060000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1807.766554][T18864] FAULT_INJECTION: forcing a failure. [ 1807.766554][T18864] name failslab, interval 1, probability 0, space 0, times 0 03:23:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xf0ffffff00000000}}]}, 0x30}}, 0x0) 03:23:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000ffffa8880000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1807.835752][T18864] CPU: 0 PID: 18864 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 1807.844133][T18864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.854190][T18864] Call Trace: [ 1807.857507][T18864] dump_stack+0x18f/0x20d [ 1807.861851][T18864] should_fail.cold+0x5/0x14 [ 1807.866461][T18864] should_failslab+0x5/0xf [ 1807.870892][T18864] kmem_cache_alloc_trace+0x47/0x2d0 [ 1807.876195][T18864] sctp_add_bind_addr+0x8c/0x370 [ 1807.881149][T18864] sctp_copy_local_addr_list+0x33e/0x4e0 [ 1807.886858][T18864] ? sctp_v4_copy_addrlist+0x690/0x690 [ 1807.892351][T18864] ? sctp_auth_asoc_copy_shkeys+0x29d/0x350 [ 1807.899041][T18864] sctp_bind_addr_copy+0xde/0x460 [ 1807.904084][T18864] sctp_connect_new_asoc+0x1cd/0x770 [ 1807.909423][T18864] ? sctp_bind+0xd0/0xd0 [ 1807.913682][T18864] ? mark_lock+0xbc/0x1710 [ 1807.918113][T18864] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1807.924019][T18864] ? sctp_get_af_specific+0x51/0x60 [ 1807.929262][T18864] __sctp_connect+0x3e2/0xc00 [ 1807.933960][T18864] ? sctp_connect_new_asoc+0x770/0x770 [ 1807.939881][T18864] ? security_sctp_bind_connect+0x8f/0xc0 [ 1807.945640][T18864] __sctp_setsockopt_connectx+0xfa/0x140 [ 1807.951287][T18864] sctp_getsockopt+0x16dc/0x6d0a [ 1807.956282][T18864] ? sctp_getsockopt_peeloff_common+0x270/0x270 [ 1807.962540][T18864] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1807.968527][T18864] ? _parse_integer+0x132/0x180 [ 1807.973403][T18864] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1807.979403][T18864] ? lock_acquire+0x1f1/0xad0 03:23:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000080000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xffffff7f00000000}}]}, 0x30}}, 0x0) [ 1807.984090][T18864] ? do_dup2+0x520/0x520 [ 1807.988345][T18864] ? __fget_files+0x272/0x400 [ 1807.993039][T18864] ? lock_is_held_type+0xbb/0xf0 [ 1807.998184][T18864] ? lock_downgrade+0x830/0x830 [ 1808.003047][T18864] ? aa_sk_perm+0x316/0xaa0 [ 1808.007588][T18864] ? aa_af_perm+0x230/0x230 [ 1808.012135][T18864] ? sock_def_destruct+0x10/0x10 [ 1808.017084][T18864] __sys_getsockopt+0x219/0x4c0 [ 1808.021949][T18864] ? vfs_write+0x1b0/0x6b0 [ 1808.026371][T18864] ? __ia32_sys_setsockopt+0x150/0x150 [ 1808.031835][T18864] ? fput_many+0x2f/0x1a0 03:23:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000ffffff9e0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1808.036177][T18864] ? syscall_enter_from_user_mode+0x20/0x290 [ 1808.042164][T18864] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1808.048153][T18864] __x64_sys_getsockopt+0xba/0x150 [ 1808.053268][T18864] ? syscall_enter_from_user_mode+0x20/0x290 [ 1808.059254][T18864] do_syscall_64+0x2d/0x70 [ 1808.063679][T18864] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1808.069574][T18864] RIP: 0033:0x45ce69 [ 1808.073481][T18864] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1808.093206][T18864] RSP: 002b:00007f2dc60e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1808.101625][T18864] RAX: ffffffffffffffda RBX: 0000000000006cc0 RCX: 000000000045ce69 [ 1808.109606][T18864] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1808.117584][T18864] RBP: 00007f2dc60e4ca0 R08: 0000000020000180 R09: 0000000000000000 [ 1808.125564][T18864] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000013 [ 1808.133542][T18864] R13: 00007fffd74c642f R14: 00007f2dc60e59c0 R15: 000000000118bf2c [ 1808.221085][T18866] validate_nla: 4 callbacks suppressed [ 1808.221096][T18866] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000090000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xffffffff00000000}}]}, 0x30}}, 0x0) 03:23:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000fffffff00000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:25 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02a2e78222000000000005000000000504000000002e"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) 03:23:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000000000a0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x3, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000007fffffff0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="b93c61ccc163", 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@delqdisc={0x34, 0x25, 0x410, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x6, 0x9}, {0x0, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x23a}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24048001) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00000003c0)=""/153, &(0x7f0000000200)=0x99) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040)=0x800, 0x4) recvmsg(r3, 0x0, 0x2000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'ip6tnl0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0xfffffdef}, 0x1, 0x300}, 0x0) 03:23:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0xfffffffffffff000}}]}, 0x30}}, 0x0) [ 1808.856843][T18922] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1809.129714][T18922] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000000000c0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x0, 0x2}}]}, 0x30}}, 0x0) 03:23:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000ffffffff0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:26 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x2, 0x3, 0x3c0, 0x240, 0x0, 0x240, 0x0, 0x240, 0x328, 0x328, 0x328, 0x328, 0x328, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0x0, '\x00', 'ip6gre0\x00'}, 0x0, 0x208, 0x240, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv6=@empty, [], @ipv6=@dev}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv6=@dev, [], @ipv4=@multicast1}, {@ipv4=@remote, [], @ipv4=@broadcast}], 0x2}}, @common=@set={{0x40, 'set\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@ip={@local, @local, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x55d) r1 = socket(0x10, 0x803, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000340)={'broute\x00'}, &(0x7f0000000240)=0x78) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r3 = accept4$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f00000002c0)=0x1c, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@broadcast, @in6=@private1}}, {{@in=@dev}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000400)={0x24, 0x1, 0x8, 0x301, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x200c0840) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r4, 0x40}, &(0x7f00000000c0)=0x8) [ 1809.455105][T18991] xt_policy: output policy not valid in PREROUTING and INPUT [ 1809.486472][T18991] xt_policy: output policy not valid in PREROUTING and INPUT 03:23:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x4, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000f0ffffffffffff0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:26 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x208000, 0x800}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000000000ff0100"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000423000/0x4000)=nil, 0x4000, 0x0, 0x50, r5, 0x0) [ 1809.535686][T19001] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000000000e0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x0, 0x8}}]}, 0x30}}, 0x0) 03:23:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000020000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1809.773289][T19027] IPVS: ftp: loaded support on port[0] = 21 03:23:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000000000f0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1809.823497][T19001] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x0, 0x300}}]}, 0x30}}, 0x0) [ 1809.893336][T19027] virt_wifi0 speed is unknown, defaulting to 1000 03:23:27 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000030000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x8, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback={0x0, 0xffffff1f}}]}, 0x30}}, 0x0) [ 1810.252357][T19076] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1810.468504][T19076] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1810.675334][T19027] lo speed is unknown, defaulting to 1000 [ 1810.880095][T19027] IPVS: ftp: loaded support on port[0] = 21 [ 1810.897241][T19027] virt_wifi0 speed is unknown, defaulting to 1000 [ 1811.224241][T19027] lo speed is unknown, defaulting to 1000 [ 1811.372116][T14649] tipc: TX() has been purged, node left! 03:23:28 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008055) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00000033eaec07dc09ccdb6a66fe0fde000000000000000000006d802f76000000000000002f120fdda00053e120472d1dc51128f24d8083d1611f88bd2e6a64ee96c9ad02cb46b649bcdf4e8fc4f8b40482f9e636253574b515d8b921b3785c25e57ae5507c6f54e51b4401cafe26f75e2236aabea115ee4bac7af409ae3cffe8e05a07e235accfb9e2782b565fa5d97e2c257c8e4bfbbb20686ae53676d98214ba"]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r2}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x72, "a38d6f03ad1bc4353aed7336b5810d49a047d7ae780d617df010c707a863cd8bb08087551b7de6d74c21bdfcadb465cde2df9511d57c1989e19768564b64fa4614745a5d88e1c72586ed1592923ae02fd9172d8de8c5fe4b366c0a9898511347a98efe82c65daa62b7dfafcc33ea2cea5919"}, &(0x7f00000000c0)=0x7a) 03:23:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000040000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000100000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0xf}}, 0x0) 03:23:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) [ 1811.534464][T19173] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000050000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x10}}, 0x0) 03:23:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000200000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1811.687349][T19184] IPVS: ftp: loaded support on port[0] = 21 [ 1811.773833][T19173] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000015270000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x17}}, 0x0) [ 1811.834889][T19184] virt_wifi0 speed is unknown, defaulting to 1000 [ 1812.281666][T19184] lo speed is unknown, defaulting to 1000 [ 1812.371176][T19184] IPVS: ftp: loaded support on port[0] = 21 [ 1812.407034][T19184] virt_wifi0 speed is unknown, defaulting to 1000 [ 1812.817765][T19184] lo speed is unknown, defaulting to 1000 03:23:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000060000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000400000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0xc0}}, 0x0) 03:23:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x38, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x5e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008800}, 0x40010) r5 = socket(0x25, 0x80000, 0x8a) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000240)={0xfff, [0x8, 0x3], 0x100}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10021}, [@IFLA_PHYS_PORT_ID={0x15, 0x22, "10eb24875cd4788dad85e588674ec79c6f"}]}, 0x38}}, 0x0) [ 1813.455023][T19291] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000600000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0xec0}}, 0x0) 03:23:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000070000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1813.617889][T19299] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:23:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x33fe0}}, 0x0) 03:23:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000080000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000058650000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1814.007421][T19303] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:23:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0xd, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x20000030}}, 0x0) 03:23:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x3c, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in={0x2, 0x0, @private=0xa010102}, @in={0x2, 0x0, @dev}]}, &(0x7f0000000300)=0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) [ 1814.175418][T19291] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000800000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000090000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x7ffff000}}, 0x0) 03:23:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0xffffffffffffffd8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001800000126bd7000fcdbdf25800020070002fd030010000008000300", @ANYRES32=0x0, @ANYBLOB="0c000900e7000005811555006bee9faf3c897ad6eec684d35b4a81618c102d6422e4ae4b0b94467fac62e3be4048c79b3a09263c90276de1a6068982e6432dd7521f7ddc552cdf4c15f735c33c6acb6e9f28daba2333329acbf67e64ab713ee6406bd42b112a8cb56d6771cc4659920c7366cf81e4957b574ff451ff226a890247c05361f637e35fc60e9a1b", @ANYRES32=0x0, @ANYBLOB="08000b000000000008000300", @ANYRES32=r1, @ANYBLOB="080007000a010102"], 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, [], [{0x40, 0xffffffff, 0x1ff, 0x3, 0xb045, 0x8001}, {0x81, 0x2, 0x6, 0x20, 0x8001, 0x5}], [[]]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}}, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r4) 03:23:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000810000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000a0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0xfffffdef}}, 0x0) [ 1814.713660][T19409] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000ffffa8880000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x2}, 0x0) [ 1814.964529][T19409] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x10, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:32 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xf8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x40) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000000, 0x1000}, 0x20) 03:23:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000ffffff9e0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000c0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x8}, 0x0) [ 1815.291999][T19471] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:23:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000fffffff00000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1815.336240][T19479] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1815.512062][T19481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:23:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000e0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x300}, 0x0) 03:23:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x12, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000007fffffff0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1815.742568][T19481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1816.022051][T19479] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0xffffff1f}, 0x0) 03:23:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000f0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x4}) 03:23:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000ffffffff0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x2}, 0x0) 03:23:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000100000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x14, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000f0ffffffffffff0000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1816.368046][T19593] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1816.642563][ T29] audit: type=1800 audit(1596943413.640:1599): pid=19594 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16363 res=0 03:23:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x3}, 0x0) 03:23:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000014000d0700000000ff03000000000010a9e11a5edba171ed918abcd5c604290a61d962ddd9fe007a8c537645c829811771c47a9b6540714d081d867dbee5b0359a1a952a846db5cfd496e7fe162936990ade17adaccb015d0db03d3dd5cd4b283470b6808a", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r6, &(0x7f0000000300)={@val={0x0, 0xf9}, @void, @x25={0x3, 0x3f, 0x17, "146ba30e333187abb90d20af8e345e9f1d0ff0984ca8a4c64273030d02460426a824970c82edf6ecda304e59222cebae2e2a8b0015a7694e89bd61e9fcd5ec1fd14144d26bcd07960bfbe726969f974cd23ff343880b73914aca870a878665584ac81595f78105decb2ce7cf2a2821a850efb1"}}, 0x7a) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 03:23:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000600000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000020000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x15, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x4}, 0x0) 03:23:34 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800), 0x1, 0x42, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) accept$inet(r1, 0x0, &(0x7f00000003c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="c3b7bd30e138a4fce4944dce6b51fcec477f21432e05378c0bec05b2d7239f6fe469a12de27b721854630be9899ebbf1a4dd2ac863bf38afeb6d37ed4ab874c8c2c073e1b824cb822cad5b15c6f7a33dcd78997e257294b4b1c6ac6ceb189810cd4253cd069a0aef8ec376ad1d735b269fab8de2554b9970bfb740510d241bb85563c4d4c0e56a901e567aff1d7d659fcd45124585802ec50b74911123a4d1ef270d3e1c1ce9f24e0d27823089758cc505436892100a3d453e3d6c7c3a475c356961017f204f64926d7a0fdb7fcae85404cfc7ff1b24f3b7bb262d9521ae", 0xde}, {&(0x7f0000000500)="a6da7b79336a0ee262664b83328f9673d2f33eb5c03d2cb1365b4b088ccfd2654d3b0364d62ab01a6481db6e13160e8711c02a15bf1563f3b890c787fd89c1f83c7ff202c8d7df2720372da4f33efcba145a0258100a3d05203ba4c995dafc5e2f4c7aed567173c07ec38d00d4f991f414368a30988c6be707615cc254d14b1028d00bf882b6a4208a6bcb8297d88c095825ba37ffc79a913704", 0x9a}, {&(0x7f00000005c0)="88702b146f9f7b154f09cb95f707695db081a2e3705270894eede57706fd0cf14ae68e12025941b56a8eb0edc007f77dab9b6c19d84b48d4b67c61bef6010e0120903aeacec2c6a9ae8d282cd8d9bb11ae71da640e90646714d0a077de81ddf16eea8b22ded85d9cd58f8d55d78aca0fc1f056eae5fc17d9a7e120a2de60483f164934901f404e47635f7f40b5352511ea6a5131817addf5b33ddbca7ccd5aebd516def2db", 0xa5}], 0x3}, 0x24048844) connect$rxrpc(r3, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r3, &(0x7f0000005c00), 0x40000000000037b, 0xff48) 03:23:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000030000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x16, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000f00000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x5}, 0x0) 03:23:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000300000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000040000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x6}, 0x0) 03:23:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000500000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x8}, 0x0) 03:23:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000050000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000600000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x16, 0x24, 0x1, 0x0, 0x0, {}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=r3, @ANYBLOB="2647bedf0b794de6e23049cdf043e51017d83564159f0bcf3d9af287dc876b82d7e9367d15d93f12116948120ce3d76c676beb98077b2defea9f48fbcb3c6dabc86d450e52de84d7dc45f30cdc2e62e9bc6fd04ddfcd4043f9a312b3acaa77b9cf", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@getchain={0x44, 0x66, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x9, 0x1}, {0xfffa, 0xe}, {0x5, 0x5}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x1}]}, 0x44}}, 0x800) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f0000000040)={&(0x7f0000000a00)={0x210, 0x0, 0x200, 0x70bd65, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_MODES_OURS={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vlan\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9ab}, @ETHTOOL_A_EEE_MODES_OURS={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'tbf\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vlan\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')(-}/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')(-}/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1400000}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'tbf\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\.%}@\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'tbf\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '$*.S&^![:+@%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xefc6}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!/@,%\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vlan\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vlan\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ';)-\x00'}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) [ 1818.433396][T14649] tipc: TX() has been purged, node left! [ 1818.444600][T14649] tipc: TX() has been purged, node left! 03:23:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x9}, 0x0) 03:23:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1818.483037][T14649] tipc: TX() has been purged, node left! [ 1818.527267][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:23:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000060000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000900000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xa}, 0x0) 03:23:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000070000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000a00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1818.780433][T19875] validate_nla: 7 callbacks suppressed [ 1818.780444][T19875] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xc}, 0x0) [ 1818.920774][T19876] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 03:23:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000080000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x1c, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000c00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1819.099157][T19875] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xe}, 0x0) 03:23:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x1d, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000090000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000e00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x1e, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xf}, 0x0) [ 1819.465181][T19963] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000a0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000f00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:36 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000005060000000f000000000000f4ffffff7400040000000000090002007379236f7c4efc49557a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007f52eb341a7d94953"], 0x1}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)={r2}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r2, 0xfb4c}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000000) 03:23:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1819.775638][T19963] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1819.790123][ T29] audit: type=1804 audit(1596943416.790:1600): pid=19999 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1953/cgroup.controllers" dev="sda1" ino=15955 res=1 [ 1820.025165][ T29] audit: type=1804 audit(1596943417.020:1601): pid=19995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1953/cgroup.controllers" dev="sda1" ino=15955 res=1 03:23:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x10}, 0x0) 03:23:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000271400000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000c0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000000000c) r2 = socket$netlink(0x10, 0x3, 0x9) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x111) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x141080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(0xffffffffffffffff) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x8913, &(0x7f0000000180)="080db5055e0bcfe847a071") ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0xbf, 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5, @remote}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 03:23:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) [ 1820.108734][ T29] audit: type=1804 audit(1596943417.020:1602): pid=19992 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1953/cgroup.controllers" dev="sda1" ino=15955 res=1 03:23:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000142700000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000e0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1820.242030][T20031] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x60}, 0x0) 03:23:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x24, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000003f00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1820.509860][T20031] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xf0}, 0x0) 03:23:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000f0000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000900), 0x10) listen(r3, 0x0) accept(r3, 0x0, 0x0) 03:23:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x25, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000100000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x300}, 0x0) 03:23:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000655800000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1820.922195][T20117] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x500}, 0x0) 03:23:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000600000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000006000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x600}, 0x0) [ 1821.196411][T20117] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000f00000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000586500000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x8ee}, 0x0) 03:23:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000300000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:38 executing program 3: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0xf4d3}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x4, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r6 = accept(0xffffffffffffffff, &(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000022c0)=0x80) bind$l2tp6(r6, &(0x7f0000002300)={0xa, 0x0, 0x1, @mcast1, 0xa09d, 0x2}, 0x20) sendmmsg(r5, &(0x7f0000000cc0)=[{{&(0x7f00000001c0)=@l2={0x1f, 0x4, @fixed={[], 0x10}, 0xfffe}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)="e778b32595f906bfc64bb209c7c1e975470fad351297bc38a795a86e988d84b33d030da976c7c47d709d551df20d264157a2a28f16af5769af1393b0f65f02e7653c2ba59fa3e5", 0x47}], 0x1, &(0x7f00000002c0)=[{0x90, 0x102, 0x6, "17c1cf5316e4c0524fd8a969ce5e1de202083b7b7f3c7118de926c4350205d89212c4ef0cd5510b38096fbef7aa9f18378e651108847fe027f6c39a4736bc03490d6ce003a1dcfebc16fd1d4cb89caebc829e3d89f3580a3d2a62cfd38d877dd314bba978a8f23929d3f16e0c09ac73ae89accb6d618fe4d9b6663e93376"}, {0xa8, 0x88, 0x4, "d977e35b1d24280beb39720b7c97b3fc1e71cfbccea657aa35f2fdd66a4b0546f49856784642615011550e5b5d79a5e30a2835a423a29c6f007d81c54f78fc55cf57cb7430528febe1603d57e37f23e0fb4f18498fe36e0986b044cd4bd262d13d983b991e6dbfe8e9458d417cf513600b807af0f6c6e2cde4c0983b8cccb36195828a594cf0f6dbfac2b0cc40e1054b8a"}], 0x138}}, {{&(0x7f0000000400)=@rc={0x1f, @fixed={[], 0x11}, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)="fc1cad1cb99341c9738a1551ca738580a1cc2ffb38720d5edc00a3839a26ad027a82149502618895c2c64722c71e49af99b7ae8424f6c5f1eef42ca678c52634d2819addda92336231fd2d34a902d0407ae51b5becf17118de0bf4f0228c4e3d610171de493d76b00de833a3adc928ee6a4c61295ca3704fac260a70f35a027d5c5f5caad3b6199986442521b8aeae99636223044db28aa9fecfa68a6272fb774e34c53815189e6d680997955714d9cd842e", 0xb2}, {&(0x7f0000000540)="4287efb48516a2350f3ba93ec12c2065efff9446c4422912017d80c589ad66ad06e6055b4784349f85f0cda1942f72a2024db629a9a530bf6be4ad2e838f6a1e64ce66b9898d6edf61aa4e5e6aaac19653b703a1ffc086642a948b1cac3041ccaff244b1d9c741f769166b1a9e4e051003", 0x71}, {&(0x7f00000005c0)="0211c6ec95b72c1a3c5268abe622dbe59a70b1f1263b2bb2a1f32a046167ded080616ff79922b056ffd08aab2fa3e7e3c7f81caf52f353b861372be433f074974b4498638d4c83cd", 0x48}], 0x3, &(0x7f0000000640)=[{0xa8, 0x116, 0xfffffff9, "13b693303ac891241322535307a9ccd1e0aea819f43462d9ab37c65b06e25275e982fd2ed9db66b1d74565338fbdd838107cb6acfed8dffd2f46e0edf3b37c3de5b8bda155f608f6830e2554d271dc67e6df31bf038bb1f44589df1bbb705463cd921b9709c427abca0f837d2958422260cd1e16f5c11affa3858074196012fbcf8e8fc0e74e9d88ae6108a1d6fec2cfb4d50f"}, {0x70, 0x104, 0x9, "a5d1e97c74623972bec1c3524f3153b738be4be44fda378a92ddb7c05ccb8c6a12dd8b9327dced1ea98ceb6e6646d05c947b0735391e1b54d4e0c20ffbb35675542b4b1fcd041b8a1eecf91671f919c39035d39520e85d6f9df1"}], 0x118}}, {{&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}, 0x7, 0x3}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)="1855308e8312084ef9cbccd001a3624985f38768c50aa864fa0409b293efce9d591acb4c7e90e33955561c0c169a11ed94f63b4e8f0a187a839abcdb6aa7321ae6fdf96658a2aa1896482c7359c4453bdb92b9a44a7b8aaf01d4691eeec62fb520e5bc4ed1", 0x65}, {&(0x7f0000000880)="0edf9b53b9719593572b0e608768ac1c16cc2e3ae07ffdd8093129d58d3c3478abd7e63a6c0e75013014670bfefc4e83644d5b2252af0522c8e778a4c61f9ad466f33d298bec787f4cd98ddf93e06a01fb4cd6f68bba16b7470b8377f3a4f7f3b5afbe3fc965a0e3e0b2a78ce3630fbb3abb9fe9b667cbfe45e7391031aaf0383b112ca6a0ee336eee6d73fcb8dace8601bb74773daa03584b78b9f47ce168996b90a761e499cebd8f1cb6986c549369bef164ef80", 0xb5}, {&(0x7f0000000940)="d430232a4fa8d2a181aa57fc064c5105c83d4ebbc115db28d2b8e4688fe4d1e15eac5d47b00187d282f2d14fee213b6254af8f", 0x33}, {&(0x7f0000000980)="f5fd203f15fe54086c5e3010f492508241e6b6e326de0871c45e8ffb4b6d26160fcd45ccb8d464362741912f0b0b8fce489a10ca496b20993d9f2d003a1f599b62894b1cb34d204b3f3505bbc55c5088db693ed5a2bef0e4ca9d2c8c0e246ed5a317fdbe365f89590b8f750ef38c821961de1b5c5fd1c61a4ad7", 0x7a}], 0x4, &(0x7f0000000a40)=[{0x108, 0x3a, 0x40004, "9e754f5bec1c5d15249e4a15df8d89652bc9047003a9fd6381dc43f074cf778befc86bf9804a2bbd14a65bf11399000a6587f076f405a462e32838f5000baf971db7ea1164fd78a76707eadf121cb00e4d5bbdbdf21d1d40c1a1eb6411df2b922634ae75662ee0883550aa0792c9742f95c69eb4304d5a15d9bb2754a8abb77cb98654b8853d122f83c8efc9ed0f16a1b651f252b778ba9df8e63cebbf96baced70e1d795a48cafe0950642361d9ce6e7623bb37cd7d9a15a848cc35cca5b31352b3249c266692c204b4f8d178900d1266871bc7be5f10d7db38dc3da8f39085209aeb82e8dadfce088bb1f69812f0d11eec62"}, {0x60, 0x0, 0x4, "963f51c4f25409c86b37485bcc586fb1efdf9c69a0a564c3f71a5963a703987101df386b4e92ebe9a86f1cfe5542372d9d5b64046f1444865fde0c2716a2a8c80a24bb211ccefcfa6c"}, {0x18, 0x114, 0x1f, "97"}, {0x68, 0x3a, 0x5d012584, "bc51657c09061e33ed11166d25ca3b7e7227b8fb0a90504b7716716e1da966c3ed86e12edd906e44e9262375e1c8626f9a67e643bc9d061fddd75bc71609e0da31221c07c969b23f58826895142d9c9d7bcbbf061b94"}, {0x10, 0x107, 0xfffffffb}, {0x68, 0x109, 0x3, "b09219c1eec06486fc01497e29e6ce5600f6ddd6d07eae6c7626f8607e92c58efe4a3dca4643f4b5b7d88e63205443e7c5d2aae4187523fe0f2adb9ea560291f48a334cde6d83a2ff1c403087a1efa0d17"}], 0x260}}], 0x3, 0x14890) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0x1200, 0x100002c07) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) 03:23:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) [ 1821.850566][T20186] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000500000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000008100000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x900}, 0x0) 03:23:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000600000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000f000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xa00}, 0x0) 03:23:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000004003000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1822.328226][ T29] audit: type=1804 audit(1596943419.320:1603): pid=20248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1956/memory.events" dev="sda1" ino=16375 res=1 03:23:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000900000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xc00}, 0x0) 03:23:39 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000a50400"/20, @ANYRES32=0x0, @ANYBLOB="000000100020ffff"], 0x24}, 0x1, 0x1400}, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c9000000660001ff030000fffb1f0000e269e300", @ANYRES32=r4], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0)={r5}, 0x8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="5cc14000", @ANYRES16=r7, @ANYBLOB="000127bd7000fedbdf25030000000800030000000000400001801400040000000000000000000000ffffac1414aa060001000a00000005000200810000000500020009000000060001000a000000080003007f000001"], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) splice(r0, 0x0, r2, 0x0, 0x4bfdc, 0x0) [ 1822.501784][ T29] audit: type=1800 audit(1596943419.320:1604): pid=20248 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16375 res=0 03:23:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000340000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1822.653277][ T29] audit: type=1804 audit(1596943419.320:1605): pid=20248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1956/memory.events" dev="sda1" ino=16375 res=1 03:23:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000a00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xe00}, 0x0) [ 1822.797548][ T29] audit: type=1804 audit(1596943419.450:1606): pid=20252 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1956/memory.events" dev="sda1" ino=16375 res=1 03:23:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000fffff0000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1822.950023][ T29] audit: type=1800 audit(1596943419.490:1607): pid=20248 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16375 res=0 [ 1822.970537][T20303] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.3'. 03:23:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000c00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1823.087947][ T29] audit: type=1804 audit(1596943419.490:1608): pid=20248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1956/memory.events" dev="sda1" ino=16375 res=1 03:23:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000010000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xf00}, 0x0) 03:23:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1823.233036][ T29] audit: type=1804 audit(1596943419.490:1609): pid=20248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1956/memory.events" dev="sda1" ino=16375 res=1 03:23:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x3f00}, 0x0) 03:23:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000e00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000020000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000f00000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000030000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x5865}, 0x0) 03:23:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x6000}, 0x0) 03:23:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000040000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1824.019126][T20401] validate_nla: 5 callbacks suppressed [ 1824.019137][T20401] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 1824.186115][T20403] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1824.331202][T20403] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x30, 0x2, {{0x0, 0xff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1}}]}}}]}, 0x60}}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:23:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000271500000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x6558}, 0x0) 03:23:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000050000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:41 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000002000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x8100}, 0x0) 03:23:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000060000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1824.659070][T20474] lo: Caught tx_queue_len zero misconfig 03:23:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000152700000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1824.736916][T20484] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:41 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="230000005e00817491bc655067d7aee4050c000020000000fe020000000000008b1832", 0x23}], 0x1}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 03:23:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xee08}, 0x0) 03:23:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000070000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000004000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1825.003926][T20484] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xf000}, 0x0) 03:23:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() r1 = socket$inet6(0xa, 0x6, 0x9af) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x14e24, 0x80000000}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) 03:23:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000080000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000655800000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x82, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x34000}, 0x0) 03:23:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x83, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000006000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000090000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1825.498403][T20558] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x400300}, 0x0) 03:23:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000586500000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1825.778078][T20558] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000a0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1826.091789][T20617] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)="6a154e60b19d3618c645a61e2abb2b676bbf565740d05211fbe9a62c91fb7622dede2270bd05b3750e628461641007bdeda2340d78a42f1127bca90ac7e5fa4313fb2644f8d837466dfd05889bc515eb05cc553c3fae57f0bd8301dfa78867aadb488433758122b99112bc45e3e46822ed9b82689ff1f384cd1e471911e9cd57916c8c6f28ed54", 0x87}, {&(0x7f0000000000)="8f3ace4b6a766e453e3229049c0523ac0e78b7929e45", 0x16}, {0x0}, {&(0x7f0000000380)="fbcb5e531a557f078bf0c43df860c0f84d540a64e7ee0e88032a94962d21edad85b75b1d4eba862719482a39aaaaa03e3bfcd6ab940fe6553f68111fcdb698c13ca4e739f0f1b2a8", 0x48}, {&(0x7f0000000400)="ade64c41c9d4a273f733a7b8bb25b686a770759f3a6843e838780ae9ced8108050e6d540c09e163ff9114869bfa58759bfa1bde20d259d70f1d7f312a60982ea9e437607f13318caec7f521f869b9e80c23e1fa5f3ea3b77e3eba3474be02933d6d5875bcce6997cd59bb95541de0cc34a8fecb84758b01eb60bce1de62b6c24816cbf4f5a0ffbeb0dfe23c7307014267b340ca28f26cd3ae5722e", 0x9b}, {&(0x7f00000004c0)="540ae89df3d21707fcb768aacd691327dc70a950ed47fe36320f6a1d5da4b0d4ca3e43bb2e401f0a84cbc70bad8e1659a30517b58979ca1d351a7b13c6d0b8663139c32db1debc49dc5a9955a4ee51e184ddc61b5d02ce92ab79adcf59e525d022445cf309a7e8abafad3c78043e1e1fa84f", 0x72}, {&(0x7f0000000180)="a0b9c607a990b5d6", 0x8}, {&(0x7f0000000540)="ef8bf68c64c9527bd4d2ecf2d629d9035d811dbcab0a0db723f7b60adef5045e5e28f5693488d55b3d4d9751438518e7bededcf3df50144f1a8f9916cd72590e81256d51e7388a4a95bd5147fe8cdd59a7f876eb85677aa01474f1627704b04fe2190d6f65fcb8b22c4c609896b123e9289486ad54d5d3", 0x77}, {&(0x7f00000005c0)="900575c34d1d097798525b4c063d0466c62e80d83b39f49839d04abe5d97f4fab8c361d6", 0x24}], 0x9, 0x0, 0x0, 0x881}, 0x4000820) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x4) r4 = accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) unshare(0x4060000) sendfile(r2, r1, 0x0, 0x100000001) 03:23:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xf0ffff}, 0x0) 03:23:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000008100000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000c0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1826.274353][T20617] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000e0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x1000000}, 0x0) 03:23:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000f000000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x2000000}, 0x0) [ 1826.621340][ T29] audit: type=1804 audit(1596943423.620:1610): pid=20675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1962/cgroup.controllers" dev="sda1" ino=16363 res=1 03:23:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000f0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:43 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:23:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2000052c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000004003000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x3000000}, 0x0) [ 1826.843994][T20688] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000100000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x3, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000340000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0xfc, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7eec5d8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x926e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4009}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3618}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256c6b8a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8fb7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57272ede}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb145}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a0b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x693e1e8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a1f1827}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c24a1ea}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78167cbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d88}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a40ba77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47674c75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25894efd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2097eccc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f4c}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x14044001) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000005c0)={@any, 0x3}) 03:23:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000014270000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1827.244747][ T29] audit: type=1800 audit(1596943424.240:1611): pid=20688 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=16361 res=0 03:23:44 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x4, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x4000000}, 0x0) 03:23:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000fffff0000000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000003f0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x8, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1827.531912][T20758] bond135: (slave veth109): Enslaving as an active interface with a down link 03:23:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x5000000}, 0x0) [ 1827.611245][T20793] bond135: (slave veth111): Enslaving as an active interface with a down link 03:23:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000010000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1827.662858][T20751] bond135: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 03:23:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0xa, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0xb, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1828.086765][T20758] bond135: (slave veth113): Enslaving as an active interface with a down link [ 1828.145454][T20793] bond135: (slave veth115): Enslaving as an active interface with a down link [ 1828.175767][T20751] bond135: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 03:23:45 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)={0x3, 'veth0_to_batadv\x00', {0x1}, 0x7}) 03:23:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000020000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:45 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x10, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x6000000}, 0x0) 03:23:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000030000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000600000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:45 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="8100aed2ac30ffa106fdab6109acad1b79118d825932c343adc319df0649d01cf4adc5814851b54eccb225b4eb911b4233a3da43ee4107141be6ee1274607afe4f02943bdd3649c32f050386be563cee95f5a6492281070000000000000016c49db235e29189ccb6824706407e27191a4d76217accc2c06389f4614ace13a100e67fd8a1eefd73554bf5ab7618e5b09213f758e5143cbd88b8e79a083c26ade9ffd990d6c2dd00000000000000000000000000004fc11086cd7f868f73003dc122b32c932eb9aefab25b5cf2ebb84fd6638a29659a8503a9f96a62b292741f0a22e90536a135827de10e8d1e65265353fb89c9fa21c838b621335d06ee53c2e108b3bf95650f92d638e7220e"], 0xb4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(0x0) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000009180)={&(0x7f0000000340)=ANY=[@ANYBLOB="74002900002ba16e4a2aefd70284c322dddbd434325d542f5bb4ae3c8c7b076aa60bd9de84cd7569d1", @ANYRES16=0x0, @ANYBLOB="b5452bbd7000fedbdf25100000000400028034000180060002000c000000060004004e220000060004000000000008000b0073697000070006006e71000008000b007369700008000400000000000800060000000000040002800c000180060804004e210000080006000100ffff62651e4dd26d128702ea4ec95f6a1fd82ef7b8bfa382fa9af04eb529c19c8bdf01e663d721e0252188bd846af28e9860fb374cac91e5db3a109e441225b6752aaf3b7571f08d66c31fa7ffdce5ff554dbefb1dda880b89fb21e6a2ec7032de2628b2939efa30cccffaa11c08e446568702"], 0x74}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1a04bb337631141b5db8e2bf67e0ae154ff2573b33f68343ef4ceff9137bcfc16de145f6216d29a4d7494f720ae5708a91a4d3551371b9803b251eb39c3ce86aab432ab0185621c0a81a1a1bd2eb800000", @ANYRES16=0x0, @ANYBLOB="28002bbd7000000000008a0000004400038005000800810000000000050000000000080001000100000014000600e8710d9b7e1b02ff010000000000000000000000000001140002006d6163766c616e30000000000000000008000600ffffffff08000600ed0300000c0001800600010002000000a0ff0500ffffffff"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 1828.710990][ T29] audit: type=1804 audit(1596943425.710:1612): pid=20896 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1966/memory.events" dev="sda1" ino=16375 res=1 03:23:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x14, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000040000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x8000000}, 0x0) 03:23:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000058650000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1828.876877][ T29] audit: type=1800 audit(1596943425.710:1613): pid=20896 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16375 res=0 [ 1828.973739][ T29] audit: type=1804 audit(1596943425.710:1614): pid=20896 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1966/memory.events" dev="sda1" ino=16375 res=1 03:23:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x38, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000810000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1829.177966][ T29] audit: type=1804 audit(1596943425.820:1615): pid=20908 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1966/memory.events" dev="sda1" ino=16375 res=1 03:23:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000050000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x9000000}, 0x0) 03:23:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0xb89, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000ffffa8880000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1829.500675][T20972] validate_nla: 7 callbacks suppressed [ 1829.500685][T20972] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1829.517857][ T29] audit: type=1804 audit(1596943426.520:1616): pid=20908 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1966/memory.events" dev="sda1" ino=16375 res=1 03:23:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000060000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x2}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xa000000}, 0x0) 03:23:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000ffffff9e0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:46 executing program 3: setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) r0 = socket(0x6, 0x800, 0xffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) sendmmsg(r2, &(0x7f0000000f80)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x2, 0x4, 0x2, 0x1}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="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", 0xfe}, {&(0x7f0000000240)="0cd6cd9262a6768d407d347b33b59cd3f59434fd54db414945d630a91e98369d45d0703ff06eb738da075ee94f990b28ca76752d47ae7713953dc45b78b3eb8c6d5c10bfb9b63d1f101ad3db8df73bb45e9a0dbcb67cf1bdb06b644b5bc72fbca0391462dd7ce881db41d2772841d1f2e1e7ec6650a0924e86bd63023537a3893a821628a418c248505cc5402b7e2cafb8b4e8d4c8092787fc5595265fbed997036e9056bd4f0e6f5549b51d78aa71f2d41b086c1539e8c98df646d5", 0xbc}], 0x2, &(0x7f0000000340)=[{0xb0, 0x1ea, 0xef9, "59441e5eb111b10e62c22cd2abb64866ba6adc564e8ca3c5c53b7ba57f7ae478a9b1fe00dda3726aa4541214e86e51791baeaf61bd02ffaebe3205225f66ea206efb3c488b0df85aff7f734932b2acbd76432db857b40831cd16f4e5e8f18db17be9318e69dbbde03d7fedc7aa2abb5861e42921772da16b9b2fdc6e732fbda860d8c933cc8b39579708da0149c4a7746004e2ca9d2e0b4197"}], 0xb0}}, {{&(0x7f0000000400)=@l2tp={0x2, 0x0, @multicast2, 0x3}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)="70dcd825dd3d7c42b022299e5855fbe23fb07cb8550a57bdea4e0f9a948e10996a5c73c49ef54c4b0986425e8f03a08234c487d7092bbb2bdde582aa14c825863947b12c67cb2d74b8193187f5e29be05cbf4c53f2ee4aaf753a19261cb3d070ebc671ab55decb188607dbc85331559b73c0f9f97b94ce315eaf061730", 0x7d}], 0x1, &(0x7f0000000540)=[{0x90, 0x100, 0x1, "c5df0bbd798b373e080aaefdd989d7831aa9ed2a27d1c1143645f928030552de740cdc4eac1bbc0f02a3252d068ed4566337a8ffbcd03f41af785f3e40eed7a2c2187194721d012db785d40e3f8c742bc1618141e9ae4168c13f15eabcfe259554fce9685f2febcc052edd8a0dec4b91ae0063d3cc5011088438d480"}], 0x90}}, {{&(0x7f0000000600)=@generic={0x5, "5143e1693e4f70366f932968d7be299c92d0426f34781829408fb3fdb66dd29d25bebf40bc49276554f1ad966daf5cabece6ba066d25ae02cdf91ab3311b1b66bf986cd66373e8f16cb5379b0b3a7b44a549628824d49a39b47c66c76e1b2d3a862cc9590a0417b7488903247b14cd7ec1a15ce02763c63a4d09c86ae22e"}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)="2979380b1955786df870717701abe43f577cb1ee07fa3ac25c49713c251e8d5c0edde8e1ad596d93c0f9b0adb2c34cc5820cbae62ff243b6e99fd5a39fbce3fe177114429ff425885b3a248c7e6381efa8e1478b21a5000a2afa61dee00ae1c25eae5e1638e18a488330794905b56b05996606ee6c2962328461d5", 0x7b}], 0x1, &(0x7f0000000740)=[{0xc0, 0x100, 0x1, "b2f6a996f6d0f3ae7d981bbee3652d3b8a41a0f2f628cb27da780e7a61eee804130199376fcc31ff578504b0f036f18efdec582a334f35642be3454b8c3f493bcad55bba73bbbb7aab86df2b3efbc47222ea1bd510d3b6e3cde59899382f01c76f4db079bd3d26affe1d92dc20e203b5e109febee247e6289628d88f2d067a7d808313b647401f19d7e9c68cfe08a027e332899894b47c542b1dee5d43e6c5534864253990577429d0cfd7e15d"}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000800)="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", 0xff}, {&(0x7f0000000900)="bd21cd34d4e68e2ae7454c1a053e7e897f78b07f83a36b1b0ff63a11ccb8c339e8d85fe86e6094736a0ac520d15656795fe8e1cf62ab2087c00c0650ce45948c488ac5db674f5e5ba9f9a812cd8745733ec9f448ffc14572906253f0dfcac3aa913ba060d97ae95ba84be556466a356d9926628438717c00d5d84c25c2fe75a7bd21e6aa72bdb51ee2347f05c9eeb54f064832e8174d7765e8a4c3ca06e7d3a911da26db39c0a2b0af8f435164d549ceff651bbdd5bad97ac80db06eebd309e1", 0xc0}, {&(0x7f00000009c0)="9e26c05fb0c2cdf60017148e1ad07b55ec70f8362e229f8d877abb99f9df2c2cd0db07631ba662eb030b561236305a597b5d7610b3bd2662264ef2bea1f4c0e4ea1298f0571388bcda72dd4f9de76d20ebc6b006712e9c275518c420c570a70ed85812d172968d76be2582ff045802b049affa5f9c1491edf8a96aeb0bf5b313ffbdbfef074c13556a7507d6ec01715a94b349aca08448eb18129565614397e9d179cdc87342bf00b955947a20e00071f5dbf76c862858aac4ab14e5def8ebd71f9cc4f6c6aadb35559430b9a45ebba0535b74f91b05fb505a9979e0bac1428d0dff969b22cf39aeebedf4950f32009f5e", 0xf1}, {&(0x7f0000000ac0)="663bcbb121086fed8188a25601172f8ea79cf46dd10488af68682e1b981b63184bac971d9bb0b1afd1b3528cb4f6ac7ea86d8bd139b20dfab01628853ebf402744ac01", 0x43}, {&(0x7f0000000b40)="0962c9d4541455717211e2d9eb71433a075a9fb71ad829e7d573b939120799fac07cca9b4ed96830bee11802c9bfb7bbc16fe8c75e3ccbaf346ff892c43d135ea0f8dfb14d7ffa1c66f313dd50c50ba777a8c922fa2d13", 0x57}, {&(0x7f0000000bc0)="b054d9d5b8fcd5c7940ecea52f7a417493e6d162f056911fe4d9f3166c74e5e9d8697dd1cd7219ce62f840e9df566f6bd691ee787c1b028e44c7dabb3acabd4cb7d3b02c039b29bd012e239608a2bad0a214ad0d1ee2dfec1f83b68b8cce45092b8523298db5b09f264bd26078d90efcebb12022f88c3ddd86a8ea268e7394306380e91a30d07a306d894ed98e56d181fa7f2c9de6896600b61ae53ba4026e12664c3155d82085b60b8a3d03befe61f1d7d3ef528300a0d8622fef12e90f4beddaef8a595c1644e88da7a9b8feea478635", 0xd1}], 0x6, &(0x7f0000000d40)=[{0x78, 0x118, 0x9, "67ec03b790503a7255bb4e15f32f17d2124f155b7ec7486971d6283a0bc9dc712d1ab13a3f7614fd65199c8a06e440aca83ce53810b447964b73ae012eba6cdf80b3a2300d267ab57656908ce8cb6f7f45578065e03bf750711d2664a88a98dab5"}, {0xf0, 0x116, 0x3b0, "78fabac498ca281ba20b7215bf7289b749514f5b55eaffc520b4474030b66d87055997b84beb85dd7f2230d18027bcc83b6f459524435ce5ce0d711cd5727f0ac3536a5ada3fb53fae618a1e8e282aa2340350ed86f5d086365f6a20c2f9a7f23a3b9d90e19ffb1c43cdb695e80b299b285f41c82ca285115af2ed21600485f129199df38acf5d5c5ee5c6ac50bcc341d462029232cda3cac4d05e5b8e9fd2a531f5df0f5a8e89c902486c05d1769a32ee58fa57fc1679a81e51cc3aab7d4e603b4f830ff39cab83b01b5804d1b6632fcc151f6175f83faaae"}, {0xb0, 0x102, 0xfffffffb, "b56befc5e23c245f1eeec9b37ba3ee3eea44a3f39a974851cf74e3a3a6fecec8e8d02d898e998ed02f7e26ee915ecc6a1872a0e01877d306248d18b9328bc6e241264df01cb1d32c1a23cdd9fbea436f22c8bd534f98f092c9c0109c1eabda1b2613bbd900d09bb6e3af2dbad4819f212e8b6cb9dbd81e8b4db1be3245efd3f2023403ee68154c8aa4788433c17f44c91505c988d2f46cdde0"}], 0x218}}], 0x4, 0x45) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000001080)=0x100, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000001100)=0x1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='io.stat\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001200)={'syztnl2\x00', &(0x7f0000001180)={'syztnl1\x00', 0x0, 0x4, 0xe3, 0x62, 0x8, 0x10, @dev={0xfe, 0x80, [], 0x22}, @ipv4={[], [], @local}, 0x8, 0x40, 0x1}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001240)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000001340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001380)={{{@in=@multicast2, @in=@multicast1, 0x4e24, 0x9, 0x4e24, 0x9, 0x2, 0x0, 0x0, 0x37ad9ea567b340bc, r7, r8}, {0x5, 0x7, 0x3, 0x482, 0x0, 0x4000000000000000, 0x3, 0x5}, {0x400, 0x4, 0x0, 0xb20}, 0x8, 0x6e6bb5, 0x2, 0x3, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@loopback, 0x3500, 0x6, 0x1, 0x2, 0x8, 0x0, 0x1ff}}, 0xe8) read(r0, &(0x7f0000001480)=""/70, 0x46) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001500), 0x8) openat$cgroup_procs(r9, &(0x7f0000001540)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000001580)) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000001640)={0x7, 0x7, 0x4}, &(0x7f0000001680)=0x28) [ 1829.623555][ T29] audit: type=1804 audit(1596943426.560:1617): pid=20973 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1966/memory.events" dev="sda1" ino=16375 res=1 03:23:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x3}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000fffffff00000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1829.873103][T20972] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000070000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xc000000}, 0x0) 03:23:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000088a8ffff0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:47 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000080)=r2) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e26, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hopopts_2292={{0x18}}, @hopopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 03:23:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000068000300000000f0ffff0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xe000000}, 0x0) 03:23:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x5}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000080000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1830.293798][T21048] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000007fffffff0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xf000000}, 0x0) [ 1830.584972][T21048] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1830.655554][ T29] audit: type=1800 audit(1596943427.650:1618): pid=21058 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=16377 res=0 03:23:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x6}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000009effffff0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000090000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1831.108094][T21116] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xb28, r8, 0x100, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0xaf8, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "97bce3996545fcd0da13edd2cfa54abe85d2864d242e7f34eafd7ada093f8898"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, {0x3f4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1a6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x398, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x23}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0x664, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x204, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x28}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0x43c, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x2b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x41}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @empty}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xb28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044010) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 03:23:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000a0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x10000000}, 0x0) 03:23:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000f0ffffff0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x7}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1831.311732][T21116] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1831.406985][ T29] audit: type=1800 audit(1596943428.400:1619): pid=21122 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=15873 res=0 03:23:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x3f000000}, 0x0) 03:23:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000700000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000c0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1831.568985][T21156] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1831.571313][ T29] audit: type=1804 audit(1596943428.560:1620): pid=21163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir760445222/syzkaller.0QxZme/1969/cgroup.controllers" dev="sda1" ino=16367 res=1 03:23:48 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x8}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x60000000}, 0x0) 03:23:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000003400000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) [ 1831.874042][T21216] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1832.065412][T21216] netlink: 'syz-executor.5': attribute type 9 has an invalid length. 03:23:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x9}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000e0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000fffffffffffff00000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x65580000}, 0x0) [ 1832.136121][ T29] audit: type=1800 audit(1596943429.130:1621): pid=21244 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.events" dev="sda1" ino=15873 res=0 03:23:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800030000000000000f0000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000000100000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0xa}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x81000000}, 0x0) 03:23:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000100000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000000200000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:49 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700000000001d1211c355b922", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=@newtfilter={0x4ab8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4a88, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xff}, @TCA_ROUTE4_ACT={0x2a4, 0x6, [@m_skbedit={0x138, 0x14, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7984, 0xfff, 0x7, 0x6aa, 0x1f}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x91e}]}, {0xb9, 0x6, "ce65243e3ae98cd0f4a14d5a77eb7cf9dd82cda5939d73ef6fff913096d80381c076f7c6225a48c76b6f12dc161286eec23e5191fa36912ca1484968ce6f9c4e1349b7278e886c83bec4c6cf5a6507587580061c6b8c299817164d40806ea94be9a72d07bde6441b17f9f2c986ab11296135f3436747a0684222250e925815987114118c578c92a748eaa40cca1220f4aae9d659aa016dbe5876c221933db7c3ae795ea55c010063570497bd42b3100ca61c1f927a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xb4, 0x9, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x401}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffb, 0x6, 0x4, 0x2243, 0x5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0x4}}]}, {0x3e, 0x6, "b82355f538170156ed590740c202290baa9a5c5acb6348558366269aa87a787f685f5a71f4d42490e9b0546b0d72d7459b619730df92fb104c1f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0xb4, 0x14, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="61903be2e7ad"}]}, {0x7e, 0x6, "9d3bd309c92eb34eec956406640de9339d1f354e965a9aa9f9ee29e2e0c54d5fd998e4e2ec2f7591942e3f558cdff8cbbfddc30bb9c5fea484262ad9c3c6fd447a5e891aac18af5a34a530f9da86ea7e34d08ad8324eeff821b5851b740ebc3f2f0422782920d32ad2066ad8d676e3b0e7d340796b30fdbb3d47"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_ACT={0x2df8, 0x6, [@m_ipt={0x126c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x1224, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0x3ff, 'raw\x00', 0x9, 0x8, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x7ff, 'filter\x00', 0x40, 0x3}}, @TCA_IPT_TARG={0x8a, 0x6, {0xff7f, 'nat\x00', 0x5, 0x9, "86db4bfd59ce08a2d0aac866d69ecbfaebb469c53e113adac80cfdf0ab65d080ae8a028687e66cfad0a707567785ab0695a7783e4d5b55444809c6a52852ad76e887a53b9a0cd8fd696552283592c4963d99a53bf61b902f7f57ef13824a66b0"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xa2, 0x6, {0x1f, 'security\x00', 0x3f, 0x400, "8c9fb0bfc86f97aadaacae79713f36867371a432626c6bfe4bf21279fb1833739c5d272b3a1646bee7d81024d840757a52bb1ce7b0222a668462cbc8e035c60ba7a5836e1c167f6df81b4459ad7305a04809b1873b0d6c36e29313505c24e5a50981c946124d57df4d7410bbe7dbee736c061f6213b6ce63"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffff8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x22, 0x6, "03256055c218ca29e7fbcfa4bc42b88bf76a241dcbb668262615809563cd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xec, 0x12, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xcc, 0x10000000, 0x1, 0x8}}]}, {0x8a, 0x6, "366e02ac86e094fbcdeddecc010c0ae04c4419aa5499f8c90d51e590e684f2649aacb0636130bbb54c415df00194e9dea5c4323c6907d5411003da8bd1ed5243d1383fac84859023100e3c6999cbc8c249f2b7d788f40560f4ba09b8da5c720592cf0fc359f7e49ca98d835d6498d5193b28c691d51d34db7f45eed9b0bf7e7033629c57daad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xd0, 0xb, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa, 0x3, @dev={[], 0x3e}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x20, 0x8, 0x7ff, 0x101}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x6d, 0x6, "6e301d8bf0484afc1ff5a7e821ed6cf9375330f5379fcf7789debfe64ab588f98da9d4a369ce5815e886fd07f3c45dc074e790553037d4afe9d2abf9dc2190df92887ccff191e5bb5dd7f06b4df528cdeabbeae30a0bff49bd645c0aea61715f40ac1c31d674a5782f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x188, 0x1e, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x8, 0x3, 0x3, 0x81}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7ff, 0x10000000, 0x5, 0xb1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x5, 0x1, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4, 0x7, 0x9}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1f000, 0x100, 0x4, 0x400}, 0x1}}]}, {0xb9, 0x6, "bd7b6603ef7b8d2ab5d0bbe5f2ed6cc4e774746651851cfa3799c769c24df69f0a8cc4132fc72a0b999e58a39f7a89326dfc86de1045b477044d878c1cfc1fce7efcca7130dcd6d5ae15cf121beb5d112859e49f1e184c5d15a9ca393b0dcbe7173e839b7c63157a6199445eb2f5876aacd284099b00e9927dafa52e398b1fa451e168a76a0082470d987f81399eff66936e27c27aaa2ab4f75451bdf1db555ab9d60c83341d201a7ae0211a34fc7b75d572e16957"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x1dc, 0x19, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0xbc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="eaf4ad3c8920"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x80, 0x3, 0x2, 0x3}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x3, 0x3ff, 0xbc}, 0xd}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x8, 0x2, 0x587}, 0x9}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0xf7, 0x6, "1de0538492a6866b0e9481dbe27f2086d7a580191e9ad7f58e19b524d1c458b992032476cc48d28d77ab51f6d05532f11c6ebe9254cf5d2c0251503eccf90fda8aa87a76c81b02981ec9640463f9f7d7bd04bcc35105d052f6b35c96e74b4d919b5ae30abe3be29642185337cacb39635e3eea636fc51d0a0b0b1ad61c2b8b93d85b95848f504537056799e59fcf38594f5f774de3e393358dd4e086aff838e9505fbb1128630a540bb0fb5142d8a48987c1dd0e709888ac9757224c1768a81b8ee3a0bfe765a0ae22ab21145b9c80285eca340c7e19e1c80b9b0e47b42f8711cd00ebc9622d067d334661e1faf635d3694d08"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x1070, 0x17, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={[], 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf12b}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6c8}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x6, 0x5, 0xa46, 0xa76}, 0x2}}]}, {0x1004, 0x6, "89f0aba0fb99903d4f1824d66be7ec53dd3e6005986b4092e07ded832e4f569f542308d76a014f30770f698eba7d59aa294fdf3bdee81d56c1d1c2e99f019268b21349073e3c32d00c52e65f3b3785e112a8797502f122b5b157d8bee0a48290fee2fd088e7a361cbb77608e7c5b12fd858aedc1619f1377d6532793e36dd1779bcfbff6cfe9a289c8f46883f97abb36c52f34788d4d43983d2fb2d03af01e77b1cac70c7996b925e6d34e1f47dd55d8a532f4709bb4dce5fc2ed012ebf2d68625195cb62ded56c9d699906e6d1c1bc5f77e8cce49326d55ca293180f2150e9682e87054c24c74415c48b572735fc10083abbee04f36be493a6bdb148b8ee953e46670a3d7d4e593519b89ace3694b0905ad6778e9cd2708e8a00ff52c9ed808c29cd0b5d4f59742e330bcba7d3d2ae048cf9ad0f36c9a6efadc14cc88b15517afe5123140af3b140a1e68a935ed932ec2961d074221d275e86089b02a759ae41ffd0be83a20fc2dc1cc2ef5e96c385bec94678d58d4b13b83555cff5eb5b5615dfcd7d0a4f5d5a04bb7d9d78c1b5722d657e1e85ada3eae3ac445ab5b9d0342f7a33ea41016f9daef5f7bc939e20cad5a5289af711945dbd108e7a9bcc805b3a2d93f73897c7ce8800b7684427204a38711e2bfe4336b890f387a8a65a2f08513ff969e1b2c520b21a0c2dd9824c38360af21cb70f2870b277897a654405cb96beb8b5f6e148aa955995ee6d4e1841e415afaa6adcfbd047b4ef0cc96f4201b45d30b1952fd87ccbe178d8329974b2cbd74b815ff2bbe6f17b98a968760e0811a96784b232e13846e2ce8823003f03a6d33230e2145e72079e53c793babef1d1e6e3619a1d35e228e0d36f59716c977227f02a3537bb2dcabae505c453f0b8c7ef46cd28fa804294bede3177cb75fdfb03c37b6b9c24b97720da078d81f840a351f5f1f248caa4b01202381e2e17e16eb7019419533cbab32c81d5c6dbc720b90585a1829a736015331966405cec68a3e8f9ba0139cf4533ba89e59f213eaa0724707b1a986bc337e78bb730520d8b5b4477823ec5fc48f3ad471fccdb69b744d27bb9a6229186ede7698df83a91802eb605b27144bfa87d725ac4ad9aa68aa379e1027940399949d0bbd5de8b1b91799d2a1554cbf5252f6f0988098382dce152dc97b62746c1bb8cc2bfdf54961632cd977c781e2784df04a4174111a57d4a0ded6fae207d938bc029120e387b4f4cb85e71fe6c8db46c29d026294701f8b13f234d699ebbe960c6868cd9a6f20535c19c45f3e2916ff055fba6bc8d1ce0ec5c36d7866f4d656b5dab7d6656c4d47a05327a141f60192ab8bd04ef67cc59e13f659536191618c7760bd07c8a5175fa0f7e5b3ecdae2ba56b030f519ba30238715603f96e83d3f0a157f2b744a35c0f7542f618be735f6f8c42316110863cf59f3ec8839e63ab4efb69daadfda64f6c7d7d72db4a704e976c51f54a7895dbadb2bd3e4a390337b924daaeebcdd4eefbb1a5df45aff8da9cd18962200d836cc173070bd819ecb74f2b8cd30a45cbb8e7d36f9396dea7f94934f727f3d5202cc4fb838e6dc0c8bcde64e3015569639982f9b8483caa00c5487accf271403a3fac8d69f391d6e94995e50212cfae09cdc00cc083402575ad55096feef2e7af03bead565e78d51ad852bede1eb6fb80c3c42e8d28fbe4d154f3bf253f38154896cb5d66cc8759f188fa0e2816765bff4e71e159aadce136d0c3bc7bc0247d43296530cca745bf1032da739c7adac7999e160bfcb1902e27faf4dab8e584af8546be0577353ee363237171c4505f8901f4e40723482bb05916c7c0d120b6651e5f54e22ef00d5eaa8571a0d2a24236d149b4a77cce68098e46f2331a79d01a77dc137c3cc067b16320b21888c9b43d88eeb148f535d1c462e054863b59be740d009b539d05b6385585d0a2b2ff6295654ee2daadf4c31d79362f3939809c0be40713640c218876435a960450ab7d9ce1a3ccc692cecf870c08b89f6d0ba6428aeb10ac9476ba86e7213a17b93f3398fde1d14619de6ca059f9ecf6d62f306c78dad1b18e3b5979786d152cc13377a364954f29cf6539150e6db2da24515d8844b08da53ec33988daa7a74a395567168288faf176b099e71f0098d62a58f7f7a875ea4ce38310dd838358a0581f4c5983ff4be07f9b54af0c8dec2e76a3c82bd2e324499c695141c9208cc3914dbb17db085ed34d5dcdbb7a5fe084a0243de53919cb1aab762cfbed7ee84a35c1be737687515662458eeb10d2ad0459f9da4a6a8e7de00188d4456fa1ebce60e94754c3698e18d668503686ece232a80d6808711301a008f82dd655225b09e8155e70faefb8c94351c17140d02c2f7680a8f109a326d3d27ad8bc3e5b3435727741620b62be70303b4552703066314fbd1453c5c2dd54d487af355d386ed0082b9893f60bc48a09cad55a3ec0d7d21f4273a1e30112b92d614c125e9442b4fce3ff574614bd4e387ef8bf362fb107393c3d162a3126415fff85a4cf71bf76e4d15488bb7ca46765ef67f22277428def802494f04f5cb2bcf6e54638069c0444fd0fc77a54d48df4695a98229cdd0893c5cafe3130492b7a930cddfe54c38cff8aebc7835f25b7dc3b9444f6d259913fca6143ca248cc89ba138e21e92446154b972ec3f4e85a1383d393d5c2772bcef274e65b4185bad18e3b70abc088dc4d4ea34494225ba7e6e7101ac1d47656573b82fc65d0e5be589bb1334a202f8b4e93abe21efcafc1c09a43f4b9c92d17f9f20eb5e7296c64b85f663aae850d31920b25289a2b89d8b49a795186b8c719850a4378c9b197fd0ab823128b4d4d5288d8cdf5555bfc7b577ece8482b1733bfb093368a3266b141c4e305dfe060377a466cc53af80b87402fcc9fefaeac689596253dcd538d2e2292bf58e05f37a413b15733992a3f792c27e61be3a3ead0b06592755477f80a03512df2254fc9e7165e0adc4d773c31bfdc047a2bde873aede5e772944d6d9c093aed1917c84f72a1b07c23e54306150c53e040357ffac0cb152ce555df6398220a898f026de8fb040a9a3f297e12eb98fad69f315aac8d3de902df7d630d4065e48b6cef2b0581ab27323b964dae64ce3b089624075f0742bec37518a06dbb0d94ede99efd78514258d685aec7f0bf9cb3d62cea87da837b2698bac39ca458a673777dea4ac69669adbf15226c53d2b3227d0371f8e0f45bb9268de9087c839a2050a926935f4ca63701f531ecf0e6e17d1a458610469187275ac08afdc5505bc7def1fd281d7c60c12eb933c9281727ed781997b13719b35634f9169a4cf8968d74087a87f6afcda464e9cb693546328249ed2844f0d110428b11068ead8d81bf61b9399d9dfe2fcf3a702e00e1d501e8a2ef4b9f0add5221e5011434afc8c2034926783c0c0f05b824f45faaa3f18c8b6521a19f4af19ec9c5887059b73e562c07a49d961e297cc8d4da52cc88c51ca178c053c18496c1759885f5cada76f06f63eaa4b65bc06bfc31afb467360ee33ade2b45c660354069974c39b7139dc8707ad0d8e3159f58655ad20cf95712b71785239b21b03c0a11dd857230c8495c6e35a1b584e195ed8667587da404989d4e6fac35c974deebd7126067d8a33c6ce7e0b52dd6e36fb23989d473339b50aa036cf76d89a9a5dd14f8ab544d38f8b2ba2e90ce7c966fa740359a4ec65202708375bc2381bbb66060eaef2c221a771b258829cd888c6b178d07c6190205fdad4e5f5157d606239444fcf7d3bb3f1467c141933e83332e8ea9657e3b53adcbf0b81f2cda631ccc64983d797c57b4a742ba7d8a617b86514fa9a6130fac9b771a5a96238324c10c1f643b6927c068820009ba8098a33426573d997dc90bdfd6dae0afa95aaf7716e588e1877f280f58197cb9d0993ec1743fdaa8b0ba5ca2bc989f1fbc3b856043786b44c8351a39bcf73284645e90b36b634c5d63d320958684650469b9148c3454a10b8008db5f023d7b380e99be2ac727b25cc12858883ff04304cb3cf85a6e864af44d71178c31d421814732241003538c2a2b17b81ffc2b2fcda099bf60e218cdde2e92cb49ec32c12cac5f82ce61ed72562ccc1d090bf4256b0e3a042a0392725d92c3ee6261c57c404c79655276f4c30e30c0fbc25701efdad954759cf674b3a27c08884c445964b089b4c102ea70c981f8d2a19de7299ca7a5df524c96a3dababc91bd2a2d367c03cfb12122e0db49d4697a19956a6ab2e8f61fa37096583c4eada268d4a1da141727d556be8ccf0a8d313213199be38e9e6b7fd420604e0563191a719af8e89043bd4249bedd0c4d45a784cdef465e6ff2d825d33774d0fbc2532ead9795f5f84fb92004d4e8308650cff73eea424d0ba67dc509f36b30cefe96884bf640b06b23edae5287b2d3d12d0146c82a435959451c78f2602a2521019c6beff17c5a50d173257b454e6870164bc2a753d73a926d6265d451aa38ffd2bdf56f5975e3d4da88d52d73ec4d1c56c0d65f3f0c752263add6131b2f8bed7e527e09f485012080a945ead53436ba4df1426a8abcd7cf20e40b7077734b5ba8ae1aed28b91cb1c6653e5bcd6423bb90d3cea7aac77b85cd6ba5b754b725d841a814a92e0d2bbc56277952c20f4fcdaa8a015034c559e940e18ae2232314fc73f988e6ca6c566108ffd6f6357009e41872b5b5e8a5537ec3c6d21355ce4147b66d67ed4fef4018f08b8b6a098eb27a699b5f0e747286a591aa58a72bba71120dcfe7f68703bef6ec3fbc967e2345d98fb8e32b089eefc0175f631e95f02e18a9621b70852175ddcda3ad3c5dc3667294d4ccf16685d16eba9a87b1bfa9ff73f02f2721a981526291072080ab896c95c10b168daf49b8e8a017813f9bfa374169c7e86281033df679a5d1e6166eaba618860a9df61fb4ced11a58b6ccee0214d8e0bc9c46bd8e046b8076d9d254e5917874bb23e92cde77cff079586f5fd6814e54b221196043cbd246d0f83e498a340902a3e7002ffcf685aa9d164936b2e249b3024d948e2a1a62f5b29dcc93ec96f546ab26ddf408fe06d852239cd94ac4a0ba2fdfd32f11674e74e7f4f4310815a120770d57ba92390f102efbf061baf1181c0423a05e869dcd67010723fab4fe433fe301826a824d625c13ecf6bc28a8e29a2a7e23e13f238d69a911fba24d63c03e2ffac6e39178b5e386d4a13ebf38c5c38254976c7e2117daaf6c99e0204033e75e1163e69d08e0660113fbdc486b2c49571cde6fb4ecd65e6a08e26fcb6452a09012a5ea5c7302e2a832003b8fbd4274660c1a50708641f695ae05356e2860ab881073815ffb76d154d8841b54b85f7de41499dd01b8f0951ded34bc7c2d4224b3e13d8e92b769a869ec27ba26f886870ca86c11507dafdb95725a8ff100e38c1d9d0a6c5d5b0e6e662a1107ef95450033d3dfeaa5cf6335342f87c094eb986f51daa75ea4eed2f43c4cbc2a0949cdc5d9a50a7366e8508862f0fb303f658b296c38e90a37c78f5859243a38f738f7dc26ad6dd8cb8b4d3952595d00a0312ba8501313776ff2fa5f7d0ee03cf9f3c1382b7fea06fc81f4315d906363a928c424c1f6c71e020fcb7071cb271af23e101bede51512ed79489cfc7f4731b5d8141f645fabce3fdc3c496d0009008874c66e1125341bb81a26b01ef5f576be24920f75dc91ebbf2b20d9a84547f4a96e4787cd31a1d5e3e10297620051e0a115c365fb835e42c5b1d081d4a9d77c0dd5f53a8744e46"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0xf0, 0x1a, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x54, 0x6, "779fc92fd9ebc37be2279188d6700c71314aacd31f625b826dfec8f92f2f4a166c6d263af6cff32a7c540eb4b78333234eebe77e254713fe8429b144835733a8c300ba2233d4e021e64c134c84862555"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x508, 0xf, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x41c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2a61}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1f, 0x391, 0x1000, 0x3, 0x6, 0x8, 0x1, 0x5, 0x22f, 0x5, 0x7, 0x1, 0x9, 0x204, 0x5, 0xf5ca, 0xb99, 0x3, 0x2, 0x54, 0x9, 0x0, 0x800, 0x101, 0x3, 0x40, 0x3, 0x200, 0x1, 0x80000000, 0x6, 0x0, 0x7, 0x4, 0xffff84a6, 0x1, 0x5af6, 0x12f70fd2, 0xfffffffb, 0x6, 0x3, 0x25, 0x10000000, 0x1, 0xf6d, 0x9, 0x4, 0x80000000, 0x7, 0x2, 0x4, 0x6, 0x1, 0x3f, 0x1, 0x345, 0x80, 0x7, 0x4, 0x400, 0x800, 0x6583, 0xe50, 0x9, 0x7, 0x0, 0x4, 0x4, 0x21, 0x2, 0x4, 0x2, 0x1, 0x81, 0x9, 0x9, 0x3, 0xf0000000, 0x9, 0x6, 0x1, 0x6, 0x3ff, 0x80, 0x1, 0x9, 0x200, 0x6, 0x7ff, 0x9, 0x1, 0x10c, 0x2, 0x0, 0x44, 0x36, 0x7ff, 0x401, 0x4, 0x1, 0x100, 0x5, 0x3f, 0x5, 0x6, 0x81, 0x4, 0x7fff, 0x0, 0x3e, 0x0, 0x4, 0x1f, 0x4, 0x10001, 0x80000000, 0x1ff, 0x6, 0xfffffff8, 0x0, 0x7, 0x5, 0x7, 0xfff, 0x93, 0x81, 0x4, 0x3f, 0x5, 0x100, 0xffff, 0x20, 0x6, 0x9, 0x6, 0x7f, 0x1, 0x80000001, 0x8000, 0x9, 0x4ac, 0xff, 0x5, 0x9, 0x2cee, 0x1, 0x4a87, 0x183, 0x40, 0x8, 0xd4, 0x8001, 0x4b9e, 0x366ae80b, 0x6, 0xffff, 0x6, 0x80000000, 0x401, 0x8, 0x1, 0x0, 0x5, 0x7, 0x5, 0x80000001, 0x3ff, 0x7, 0x7ff, 0x142, 0x2, 0x6eb, 0xfc, 0x3, 0x6, 0x5, 0x6, 0x3, 0x8000, 0x866, 0x4, 0x8000, 0x52a, 0x5, 0x1, 0x8, 0x0, 0x80000001, 0x7fffffff, 0xa345, 0x9, 0x7, 0xffffffff, 0x401, 0x27, 0xffffffff, 0x200, 0x3, 0x7, 0x2, 0x800, 0xee, 0x80000001, 0x2, 0x5, 0x45f, 0x4, 0x6, 0x35, 0xffff, 0x7fff, 0x7, 0x8000, 0x3, 0x2, 0x2, 0x8000, 0x5, 0x1, 0xfffff334, 0x5, 0x2, 0x1000, 0x1, 0x7, 0x6128, 0x8, 0x4, 0xbe, 0x1, 0x9, 0xffffffe1, 0x3, 0xe8, 0x54b, 0x7f, 0xfffffffd, 0xffffffe0, 0x1, 0x5, 0xffffff0d, 0x1f, 0x0, 0x5, 0x94, 0x4, 0x5, 0x10001, 0x0, 0xff, 0x3, 0xffffffeb, 0x80, 0x7841, 0xfffffffc, 0x1]}]]}, {0xc2, 0x6, "54eb68debf6ecd6e51a23567b3bd3bda0918ecc097d8e53b239ae76c678856f8eee5e1e3b363aaac3ec46c82cba7fe2f2333aa39949fd141f1b29ed0711affba7265c98df6a07e3069d3d7eb6f19694b26622e6aa619a26c0b87bb23c5a80ba83375d8bba3710369c82bddd8c457cc785a2c426682754f30de1234493230e8372f24b79bf561e8e9c825849e8f0a0e70edd4fca3d44819402f0311b7974ead2561b45d9a4063ea682a3c3b6940b9bb767bc3c563c93307651b8cc17045fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x3c, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_POLICE={0x48c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x3ff, 0x91, 0x3, 0xff, 0xffffffff, 0x101, 0x5, 0x5d2980, 0xc4, 0x9, 0x8, 0x0, 0xffff, 0x7ff, 0x9, 0x2, 0x8, 0x7fffffff, 0xfffffffb, 0x6, 0x9, 0x40, 0x2, 0x7, 0x40, 0x0, 0x0, 0xfffffffe, 0x2, 0xfff, 0x7fffffff, 0x20000000, 0x1, 0x490f2fac, 0x10000, 0x4, 0x81, 0x8, 0x5, 0x1379, 0x0, 0x4, 0x4, 0x2, 0x2, 0xb03, 0x4, 0x3ff, 0x80000001, 0x400, 0x5, 0x600, 0x40, 0x766, 0x8, 0x100, 0x80, 0x4, 0x7, 0x9, 0x0, 0x5, 0x7fffffff, 0x1f, 0x4, 0x2, 0x100, 0x9, 0x2, 0x0, 0x6, 0x7, 0x99a, 0xc7, 0xbe89, 0x101, 0x1, 0xdad1, 0x3fed, 0x0, 0x3, 0xaf38, 0x80000000, 0xfffffe00, 0x1, 0x2, 0x0, 0x3ad1, 0x986, 0x100, 0x50, 0x6, 0x3, 0x0, 0x3, 0xff, 0x0, 0x200, 0x7, 0x8a, 0x8, 0x10000, 0x20, 0x8, 0x9b, 0x9, 0x5, 0x4, 0x1, 0x3, 0x5, 0x6, 0x5, 0xfffffffd, 0x0, 0x8000, 0x9, 0x80000001, 0xaf39, 0x0, 0x10001, 0x1, 0x4, 0x40, 0x6, 0x3, 0x1, 0xfffffff9, 0x1, 0x1, 0xc6, 0x81, 0xffff, 0x5fd9, 0xfff, 0x9, 0x401, 0x9, 0x7fffffff, 0x6, 0x9, 0x401, 0x7f, 0x9, 0x1, 0x3, 0x2, 0x3ff, 0x6f, 0x8, 0x1, 0x1, 0x10000000, 0x4, 0x2, 0x7ff, 0x5, 0x18000000, 0xfffffffa, 0x3ad3, 0x2, 0x9, 0x0, 0xfffffffd, 0x1, 0x9705, 0x390, 0x53bf, 0x7, 0xff, 0x9, 0x1, 0x1, 0x4, 0x2, 0x46a, 0x4, 0x3, 0x4faf, 0x3f, 0x563, 0xff, 0x8000, 0x9, 0x400, 0xc9de, 0x6, 0x8000, 0x2, 0x6d38, 0xa3, 0xeda, 0x4, 0xffff7ff0, 0x7, 0x4, 0x7, 0x8, 0x1, 0x7, 0x9, 0x5, 0x7742, 0x4, 0x0, 0x2ecf1a18, 0x3, 0x80, 0x99, 0x8, 0x8001, 0x9, 0x7ff, 0x7fff, 0x7e, 0x81, 0x9, 0x2, 0xfff, 0x80, 0x4, 0x4, 0x80, 0x10001, 0x2, 0xfc, 0xfffffffe, 0x7, 0x1, 0x6, 0x6, 0x101, 0xffffff81, 0x400, 0xa96, 0x9, 0xa01, 0x100, 0x2, 0x3b5, 0xffffc7f4, 0x7, 0xff, 0x9, 0x3f, 0xf0000000, 0x200, 0x8, 0xae7b, 0xfdf, 0x8, 0x826, 0x3, 0x8001, 0x1000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x10000000, 0x3, 0x800, 0x5, {0x20, 0x1, 0x81, 0x7fff, 0x7, 0x8}, {0x80, 0x1, 0x3, 0x4, 0xfb67, 0x9}, 0xfffffff9, 0x3, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xee, 0x1, 0x20, 0x9, 0x101, {0x80, 0x2, 0x80, 0x2, 0x9, 0xa6e}, {0x1f, 0x2, 0x2, 0x7f, 0x400, 0x2}, 0x6, 0xff, 0x2}}]}, @TCA_ROUTE4_ACT={0x1510, 0x6, [@m_sample={0x12c, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}]}, {0xef, 0x6, "3ebe87fab3186d0a1c05b702f4d38a98c99b84587102eae181416079a90c333a3b3c9116c60f90f18a59b07d58b931ca6dc8e9bb0e5aebaeb6e67978b8b6a27e55fa4bab11705eab5cacafeb5c80763d8ede8fa2d78fe1f3bcdb7ca3da859b490439714d127cf17b36ccdf35107110ec325fd0febfa2b64f1c803e6d530da563b26bd82f3a0d5fa82a697cd7a8f769a4042e1513749589e5e3631a7c09e6b8aeca22b6eb1183975fed43718a297ece50222a5b91e3db41e9281d4651e814d9a7e37ba159e12ff8aaf2bd4d531beca350efccf43cdb48784be179863d1361663ed5e6a7b1ad442b0fb4b97f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x12b8, 0x12, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x11a4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1c4, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xb}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x44, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x90, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xb}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xef8, 0x2, {{{0x2, 0x3, 0x6, 0x7}, 0x40, 0x0, [{0xfdb0, 0x7f, 0x800, 0x10001, 0xfffffffd, 0x1}, {0x7, 0x9, 0x6, 0x5, 0xfffffffe, 0x8}, {0x3f, 0x5, 0x3, 0xfffffff7, 0x6, 0x3f}, {0xcf7, 0x6, 0x1ff, 0x2, 0x7ff, 0x3}, {0x1, 0x76, 0x5, 0x0, 0x2, 0x4}, {0x3, 0x9, 0x9, 0x8001, 0x8001, 0x9}, {0x2a, 0x40, 0x1, 0x3ff, 0x8, 0x1}, {0xfffffffc, 0x480000, 0x5, 0x9dc, 0x80000000, 0x8}, {0x7, 0xb45, 0xce87, 0x7, 0x6, 0x7}]}, [{0x2, 0xffffffff, 0x3ff, 0xebd7, 0x1, 0x1}, {0x4, 0x0, 0x30, 0x40f, 0x5, 0x744d}, {0x733c, 0x48, 0x3, 0x132d, 0x9}, {0x19, 0x7, 0x1, 0x4, 0x20, 0x89a3}, {0x6, 0xd9, 0x3be7, 0xffff4814, 0x9, 0x5}, {0x6b, 0x1000, 0x2, 0x2, 0x7, 0x1ff}, {0x4865, 0x0, 0x8, 0x10001, 0xffffffb3, 0xcaa}, {0x400, 0x5, 0x7, 0x5, 0x6, 0x3ff}, {0x1f, 0x5d5, 0x3, 0x2, 0x2, 0xacc5}, {0x4a48, 0x3, 0xfffffffe, 0x10000, 0x6, 0x3}, {0x3, 0x1, 0x7b82, 0xfd, 0xdae00000}, {0x7, 0x9, 0x80000001, 0x7, 0xff, 0xfffffff9}, {0x9, 0x6, 0x7f00000, 0x2, 0x3, 0x4}, {0x7, 0xfff, 0x7fff, 0x4a, 0x0, 0x9c3}, {0x7f, 0x0, 0x4, 0x5, 0x7fff, 0x5}, {0x4, 0x6, 0x8, 0x9, 0x81, 0xfffffff9}, {0x1, 0x4, 0x9, 0x4, 0x8c}, {0x40, 0x81, 0x55, 0xd1, 0x9, 0x7ff}, {0x3bd, 0x6, 0x80, 0x1, 0x0, 0x7}, {0x200, 0x7, 0x1ff, 0x4, 0x1, 0x25e}, {0x52, 0xffff, 0x100000, 0x7d, 0x3f, 0x1}, {0x0, 0x0, 0x4, 0x3, 0x3, 0x5}, {0x0, 0x5, 0x4, 0x40, 0x7fff, 0x5f}, {0x4, 0x4, 0x0, 0x5, 0x40, 0x8}, {0x7f, 0x1, 0x443, 0x1, 0xc71d, 0x80}, {0x800, 0x4, 0x7, 0xffffff62, 0x7, 0x8}, {0x5, 0x88, 0x43f, 0x6, 0xc437, 0x42}, {0x8085, 0xfffffffe, 0x2, 0x1, 0x800, 0x7}, {0x1, 0x8, 0x996, 0xfff, 0xfffffff8}, {0x5, 0x1, 0x0, 0x0, 0x93d, 0xa1}, {0x6, 0x8, 0x6, 0x80000001, 0x15d, 0xa45}, {0xb09c, 0x5, 0x1, 0x9, 0x7, 0xfff}, {0x2, 0x4, 0x2, 0x81, 0x2, 0x2}, {0x2, 0x1000, 0x0, 0x400, 0x4}, {0x4, 0x81, 0x0, 0x3, 0x6, 0x6}, {0xfffffff9, 0x5, 0x4, 0x78b, 0xfc97, 0x1f}, {0x7fffffff, 0x7, 0x3f8, 0x2, 0x8, 0x8}, {0x1, 0xc1, 0x5, 0xca6, 0x1, 0x9}, {0x3, 0x9, 0x4, 0x4, 0x4, 0x5}, {0x2, 0x7, 0x8, 0x7, 0x5, 0x401}, {0x2, 0x40, 0x3ff, 0x500, 0x7ff, 0x7ff}, {0xb0ab, 0xf52e, 0x8e8, 0x80000001, 0xc6ad, 0x1}, {0x43, 0x1000, 0x1, 0x7, 0x17, 0x100}, {0x4, 0x4, 0x6, 0x4, 0x5, 0x8}, {0x400, 0x46a, 0x8, 0x9, 0x81, 0x3}, {0x5be4, 0x3, 0x4, 0x3, 0x2, 0x2}, {0x9, 0x7fff, 0x8, 0x10000, 0x7, 0x3}, {0x4, 0x80000001, 0x3, 0x51, 0x3, 0x81}, {0x5, 0x161, 0x0, 0x4, 0x10001, 0x5}, {0x5, 0xfff, 0x896, 0x200, 0x1, 0x5}, {0x2, 0x1cf, 0x2, 0x5, 0x0, 0x200}, {0x9772971, 0x6, 0xf01, 0xff, 0xd42, 0x84}, {0x1, 0xfffffffd, 0x7f, 0xb1, 0x8, 0x7}, {0x1f, 0x0, 0x1, 0x2, 0x5, 0x2e3}, {0x20, 0x9, 0x0, 0x32, 0x5, 0x200}, {0xfffffff8, 0xffff, 0xfca, 0x3f, 0x1, 0x7}, {0x3, 0x0, 0x7, 0xffffffff, 0x5, 0x1}, {0x8, 0x639, 0x14, 0x3ff, 0x9, 0x5}, {0xffffffff, 0x6, 0x7, 0x7fff, 0x0, 0x3}, {0x20, 0x2, 0x9, 0x800, 0xffffffff, 0x7f}, {0xe20e000, 0xfffff310, 0x1, 0x7, 0x200, 0x2}, {0x1, 0x2, 0x8, 0xffffffff, 0x0, 0x8001}, {0x2, 0x4, 0xef63, 0xffff, 0x3f, 0x3}, {0x6fa4, 0xe3900902, 0x6, 0xbc6a, 0x100000, 0x8}, {0x7fffffff, 0x9, 0x2, 0x7, 0x81, 0x2}, {0xffffffff, 0xe572, 0x2, 0x1, 0x6, 0x6}, {0xf43e, 0x6, 0xff, 0x9, 0x5, 0x3ff}, {0x5, 0x3ff, 0xfffffff7, 0x1ff, 0x2, 0x3193}, {0xd58b, 0x7, 0x3, 0x4, 0x6, 0x9}, {0x101, 0x5, 0x6bdd4067, 0xb8, 0x7be8, 0x1f}, {0x7, 0x7, 0x6, 0x7ff, 0x7, 0x1}, {0xaf9, 0x1f, 0x2, 0xdd, 0x2, 0x1}, {0xfff, 0xfffffffd, 0x6, 0xeb, 0xfffffff8, 0x6}, {0x0, 0xff, 0x80000000, 0xcaf0, 0x1, 0x800}, {0x9, 0x200, 0x5, 0x81, 0xfffffff7}, {0x4, 0x7, 0x8, 0x7f, 0x0, 0x8000}, {0x4, 0x7, 0x29, 0x7f, 0x4f7}, {0x5, 0x9, 0x9, 0x3, 0x200, 0x7}, {0xff, 0x7ff, 0xd4, 0x0, 0x6, 0x36ce}, {0xffff, 0x2, 0x10000, 0xcea8, 0x1, 0x1}, {0x0, 0x2, 0x3, 0x0, 0x8622, 0x1f}, {0x6, 0xe147, 0xb526, 0xd, 0x3, 0x9}, {0x9a, 0x6, 0x0, 0x80, 0x2, 0x3}, {0x80000000, 0x40, 0x5, 0x4, 0x1, 0x20000}, {0x3ff, 0x5, 0x4f, 0x8001, 0x6, 0x3}, {0xffff, 0x5, 0x8, 0x5, 0x2, 0x8001}, {0x3, 0xfffffff9, 0x6a, 0x5, 0x3ff, 0x338d6514}, {0x9, 0x3, 0x8000, 0x756, 0x8, 0x5}, {0xf65, 0x8, 0xfffffff8, 0x80000001, 0x0, 0x5}, {0x2, 0x6, 0x9, 0x5, 0x2, 0x1}, {0x1f, 0x9eb, 0x926, 0x6, 0x7ff, 0x7fffffff}, {0xfffffff8, 0x6, 0x101, 0x6, 0xe5f, 0x401}, {0x2, 0x1, 0x4d, 0x8000, 0x4, 0x9}, {0xffff, 0x400, 0x1, 0x0, 0x13, 0x7bc}, {0x7, 0xb2ca, 0x81, 0x2, 0x1, 0x1}, {0x100, 0x7fff, 0x0, 0x4, 0x9, 0x1000}, {0x7fffffff, 0x5, 0xffffffff, 0x7, 0x0, 0x7}, {0x9, 0x6, 0x5, 0x8000, 0x8, 0x5}, {0x101, 0x40, 0x400, 0x0, 0x5, 0x8e}, {0x9, 0x7f, 0x7, 0x8, 0x80000000, 0x514}, {0xff, 0x5, 0x9, 0x4568, 0xbc39, 0x7ff}, {0x4, 0x61, 0x8, 0x4, 0x7, 0x7}, {0x1, 0x7ff, 0x20, 0x800, 0x13, 0x800}, {0x1, 0x8, 0x1, 0x7, 0x825}, {0x3, 0x40, 0x3, 0x6, 0x7f, 0x9}, {0x0, 0x7, 0x1, 0x401, 0x905a, 0x80000000}, {0x4, 0x20e, 0x8, 0x1f, 0x1}, {0xfffff586, 0x5, 0x3ff, 0x80000001, 0x3, 0xfffffeff}, {0x9, 0x81, 0x8, 0x1, 0x3, 0xffffffff}, {0x3, 0x4, 0x0, 0x7b, 0x8, 0x6}, {0x6, 0xf73, 0x5, 0x6, 0x100, 0x10000}, {0x1, 0x4, 0xae, 0x80, 0x6, 0x8}, {0x2, 0x3, 0xfffffffc, 0x88, 0x5, 0x101}, {0x9, 0x2, 0x6b49, 0xc042, 0x8}, {0x81, 0x1, 0x6, 0x10001, 0x59, 0x6}, {0xffffff81, 0x200, 0x2, 0x3, 0x80000001, 0x21}, {0x9, 0x8, 0x81, 0x0, 0x3, 0x3}, {0x7ff, 0x20, 0x8, 0xc8da, 0x0, 0x3}, {0x7, 0x4, 0x9, 0x8001, 0x2b, 0x2}, {0x6, 0x9, 0x9, 0x7, 0xffffff00, 0x7}, {0x7, 0x5, 0xd5b, 0x0, 0x1ff, 0x1}, {0x3, 0xf52, 0x9, 0x0, 0x2, 0x10000}, {0x7, 0x5, 0x9, 0x400, 0x2, 0x8}, {0x3f, 0x0, 0x10001, 0x3ff, 0x9, 0x8}, {0x10000, 0x2, 0xf6, 0x6, 0xf6ca, 0x5}, {0x7, 0x7, 0x0, 0x6, 0x4, 0x9}, {0x10001, 0x6, 0x0, 0x7ff, 0x480}, {0x5, 0x6, 0x10000, 0x4, 0xffffffff, 0x8}], [{0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x87bdf664a8a5f77d}, {}, {0x4}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x4}, {0x4}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4}]}}]}, {0xec, 0x6, "5b110fa74c8175660ed41f612b0b6cec6622dca6dc88737a763ac807b6bec9a530cb5ec7ddc1c4fe5d2dcd269602f53edb30d6da240d0ebed38eb75b508bc88be5b4130d47321dfee8ae113990ca4f653d203476e40ed585087c3f75b2ce7beb56d8a3b6e1cbd9c298360331bf96fab50d8368abf5b80eaae4d664a02925ea600f18d6eac432cddf7dcac74458245d7385da6c94c9d65f2563cda1597125a303e1807583fd158dfbd3723096dd6d3c2d687e688b2842a68ce331dc32bf59b3f557fe673f9768e7650ca2eb950fdb12f69e5a643a56ba9557f629ada096860e58f51c73d9ffc208e3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x128, 0x20, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4e9}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x373}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xac, 0x0, 0x3, 0x3f, 0x3ff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x1, 0x2, 0x6, 0x7fffffff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x89, 0x6, "1a94a8892cff2a74b7184818820e120c0c1a3813b318f80c4039a7f737c5ee374f1ab4a6dd6a6fdac398b3e5a06beae90fd4dce5f3b8810393d5aa393b290540da7aabcfc1e4391401c127771bdfd24a73adb1ed915bfd236da81d73f047d9913390d177fba1e5a999a06fe73662c93fd21abb1261bd815c4bbf251bd4b73ae56d1530fa63"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x4ab8}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1832.421818][T21273] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1832.483230][T21283] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:23:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000200000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000000300000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x88a8ffff}, 0x0) 03:23:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0xb}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) [ 1832.618180][T21283] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:23:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000000400000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000015270000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@local, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x6}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8}, {0x0, 0x2000000000000000}, {}, 0x70bd31, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x10f, 0x0, 0x0, &(0x7f0000000100)) 03:23:50 executing program 3: sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0xd0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1e}, {0xc, 0x90, 0xff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0xc, 0x8f, 0xffff}, {0xc, 0x90, 0xfffffffffffffffc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x1cb4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="5bb935def2840398858e4c2c0a5883d97163a4456c9edfa131b06ac1f01adf2de0bc5fc7c8e2aca98493d27897b11a65a73da98ceaf91a3226db43824cd2da26792a1a1782c31238f71734ca504209d753e1027987a5aa41b3b7c0a928b63a2f4ca7ec022e58b93f03adda66401ae59eb18d174e0de1f18b9cada5434922a6e294261e7cbc913959805e0d051a60f38535e7ead5c7dd6dc3fea7194179e4ab3fb09661e7c583ab05917c65a54c8ae7"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', r1}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf25170000000a001a00aaaaaaaaaaaa000008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="0c00a0da030f865ffc0300000a001a00aaaaaaaaaabb00006800dbf97ff543b1d424169aa92025e26ee1f118a98cbd9e36b05ee41f4a74901da47244261cc19390e89b97154603f2766d249121f4ed151834ccea8a62f2c5d86f152a9dc9ff04c40e34320bc5442ce5c9c0ccc71ee885efea5d8e7f0870706e60a3c7f270081da8cd27e18e6720663d02e9490b8f092f7ea959d7611bcdbd810e0593942ea87b165abb7aeb3f1205918a7e14a402bdb65a519833cbc2f7f4ae5bb1289311687212b287db528e3ab2d81c2b1af0c5bc8f79e3868c0a7ff08001d73e01c558e04861f2c65b24addaeec9fe1ea32565a4e68a95de5805973515"], 0x48}, 0x1, 0x0, 0x0, 0x4000082}, 0x48884) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1f}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000706010307d43a5900d700000000e9000500010007ddf7466f1959c6d2dbbbbd881ff381c5adaeee2004008b5bd171ada5c9ed13180d05b740964debe96f0bb4f0bbe0f3c3e3252f4f7d2b8874025be35bda3016edaf2e2b92103e39f4e7ee85acd98b561bc5d501c086859b364270ad3e051f99e77cfbf0b0ec18503685c754101e9322802b380d45f87f3e9bbd636d6c9e8654261379711f47b9dc09eb625a027bc44ac58f8569b525ad4b3bffbf241dd40bfd04cd89da9e84dc18ffc2a30f621b18d345b88aba7585ad24f76dbe7031ed"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:23:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x9effffff}, 0x0) 03:23:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000400000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0xc}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000000500000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xee080000}, 0x0) 03:23:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000000000000600000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0xd}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) 03:23:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680003000000000000600000000000000000000006000300000000001c0002000000000000000000010000000000000000000007"], 0x3c}}, 0x0) 03:23:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a000800ac14142603000e1208001e00040000000300040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) 03:23:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0xf0ffffff}, 0x0) [ 1833.375345][T21383] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1833.418921][T21383] general protection fault, probably for non-canonical address 0xdffffc0000000010: 0000 [#1] PREEMPT SMP KASAN [ 1833.430645][T21383] KASAN: null-ptr-deref in range [0x0000000000000080-0x0000000000000087] [ 1833.439056][T21383] CPU: 1 PID: 21383 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 1833.447372][T21383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1833.457438][T21383] RIP: 0010:fib_check_nexthop+0x198/0x660 [ 1833.463164][T21383] Code: 48 c1 ea 03 80 3c 02 00 0f 85 7b 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5b 10 48 8d bb 80 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 4b 04 00 00 48 8b 9b 80 00 00 00 48 b8 00 00 00 [ 1833.482798][T21383] RSP: 0018:ffffc9001929f320 EFLAGS: 00010202 [ 1833.488872][T21383] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000f0f9000 [ 1833.496849][T21383] RDX: 0000000000000010 RSI: ffffffff86c8047d RDI: 0000000000000080 [ 1833.504817][T21383] RBP: 000000000000007c R08: 0000000000000001 R09: 0000000000000003 [ 1833.512792][T21383] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc9001929f8c0 [ 1833.520857][T21383] R13: 0000000000000001 R14: ffff88804ad48000 R15: ffff888063e55980 [ 1833.528834][T21383] FS: 00007fa686849700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1833.537764][T21383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1833.544349][T21383] CR2: 00007ffcf3f4e9f0 CR3: 00000000a798d000 CR4: 00000000001506e0 [ 1833.552326][T21383] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1833.560323][T21383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1833.568287][T21383] Call Trace: [ 1833.571583][T21383] fib_create_info+0x1ae8/0x49e0 [ 1833.576532][T21383] ? fib_result_prefsrc+0x4c0/0x4c0 [ 1833.581748][T21383] ? do_raw_spin_unlock+0x171/0x230 [ 1833.586946][T21383] fib_table_insert+0x1c7/0x1af0 [ 1833.591892][T21383] ? wait_for_completion+0x260/0x260 [ 1833.597179][T21383] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1833.602722][T21383] ? pcpu_alloc+0x128/0x1410 [ 1833.607338][T21383] ? fib_route_seq_show+0xe10/0xe10 [ 1833.612563][T21383] ? fib_trie_table+0xf7/0x310 [ 1833.617323][T21383] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1833.623208][T21383] ? fib_new_table+0xfb/0x460 [ 1833.627878][T21383] inet_rtm_newroute+0x109/0x1e0 [ 1833.632900][T21383] ? inet_rtm_delroute+0x350/0x350 [ 1833.638016][T21383] ? lock_is_held_type+0xbb/0xf0 [ 1833.642989][T21383] ? inet_rtm_delroute+0x350/0x350 [ 1833.648098][T21383] rtnetlink_rcv_msg+0x44e/0xad0 [ 1833.653055][T21383] ? rtnetlink_put_metrics+0x510/0x510 [ 1833.658513][T21383] ? lock_acquire+0x1f1/0xad0 [ 1833.663193][T21383] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1833.668478][T21383] netlink_rcv_skb+0x15a/0x430 [ 1833.673500][T21383] ? rtnetlink_put_metrics+0x510/0x510 [ 1833.678960][T21383] ? netlink_ack+0xa10/0xa10 [ 1833.683562][T21383] netlink_unicast+0x533/0x7d0 [ 1833.688327][T21383] ? netlink_attachskb+0x810/0x810 [ 1833.693442][T21383] ? _copy_from_iter_full+0x247/0x890 [ 1833.698830][T21383] ? __phys_addr+0x9a/0x110 [ 1833.703342][T21383] ? __phys_addr_symbol+0x2c/0x70 [ 1833.708368][T21383] ? __check_object_size+0x171/0x3e4 [ 1833.713657][T21383] netlink_sendmsg+0x856/0xd90 [ 1833.718427][T21383] ? netlink_unicast+0x7d0/0x7d0 [ 1833.723394][T21383] ? netlink_unicast+0x7d0/0x7d0 [ 1833.728339][T21383] sock_sendmsg+0xcf/0x120 [ 1833.732772][T21383] ____sys_sendmsg+0x6e8/0x810 [ 1833.737549][T21383] ? kernel_sendmsg+0x50/0x50 [ 1833.742239][T21383] ? do_recvmmsg+0x6d0/0x6d0 [ 1833.746834][T21383] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1833.752811][T21383] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1833.758788][T21383] ___sys_sendmsg+0xf3/0x170 [ 1833.763375][T21383] ? sendmsg_copy_msghdr+0x160/0x160 [ 1833.768657][T21383] ? __fget_files+0x272/0x400 [ 1833.773334][T21383] ? lock_downgrade+0x830/0x830 [ 1833.778203][T21383] ? find_held_lock+0x2d/0x110 [ 1833.782973][T21383] ? __might_fault+0x11f/0x1d0 [ 1833.787747][T21383] ? __fget_files+0x294/0x400 [ 1833.792423][T21383] ? __fget_light+0xea/0x280 [ 1833.797019][T21383] __sys_sendmsg+0xe5/0x1b0 [ 1833.801517][T21383] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1833.806541][T21383] ? trace_hardirqs_on+0x5f/0x220 [ 1833.811567][T21383] ? lockdep_hardirqs_on+0x76/0xf0 [ 1833.816708][T21383] do_syscall_64+0x2d/0x70 [ 1833.821119][T21383] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1833.827004][T21383] RIP: 0033:0x45ce69 [ 1833.830895][T21383] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1833.850498][T21383] RSP: 002b:00007fa686848c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1833.858910][T21383] RAX: ffffffffffffffda RBX: 000000000002bf00 RCX: 000000000045ce69 [ 1833.866877][T21383] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1833.874847][T21383] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 1833.883241][T21383] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 1833.891212][T21383] R13: 00007fffdf4aaf5f R14: 00007fa6868499c0 R15: 000000000118bf2c [ 1833.899186][T21383] Modules linked in: [ 1833.968761][T21383] ---[ end trace 51b60e7706fe30c8 ]--- [ 1833.974442][T21383] RIP: 0010:fib_check_nexthop+0x198/0x660 [ 1833.981581][T21383] Code: 48 c1 ea 03 80 3c 02 00 0f 85 7b 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5b 10 48 8d bb 80 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 4b 04 00 00 48 8b 9b 80 00 00 00 48 b8 00 00 00 [ 1834.002075][T21383] RSP: 0018:ffffc9001929f320 EFLAGS: 00010202 [ 1834.008257][T21383] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000f0f9000 [ 1834.017878][T21383] RDX: 0000000000000010 RSI: ffffffff86c8047d RDI: 0000000000000080 [ 1834.026984][T21383] RBP: 000000000000007c R08: 0000000000000001 R09: 0000000000000003 [ 1834.037460][T21383] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc9001929f8c0 [ 1834.046214][T21383] R13: 0000000000000001 R14: ffff88804ad48000 R15: ffff888063e55980 [ 1834.055054][T21383] FS: 00007fa686849700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1834.064657][T21383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1834.071963][T21383] CR2: 00007f6711bea000 CR3: 00000000a798d000 CR4: 00000000001506e0 [ 1834.080889][T21383] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1834.088959][T21383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1834.103634][T21383] Kernel panic - not syncing: Fatal exception [ 1834.110883][T21383] Kernel Offset: disabled [ 1834.115195][T21383] Rebooting in 86400 seconds..