(0x7f00000000c0)={0x0, 0xd16a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:07:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xf000) 06:07:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xf0ffff}, 0x0) [ 1398.318054][T15283] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1398.331484][T15281] device batadv0 entered promiscuous mode [ 1398.391057][T15281] device batadv0 left promiscuous mode 06:07:49 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x0, 0x3}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="b511000000009b22c31eae7594f93ca5d74fee7bdb6e4d5a2c08d5193a41fe8a38ea290010"], 0xff86) close(r5) socket$netlink(0x10, 0x3, 0x4) splice(r2, 0x0, r5, 0x0, 0x80000001, 0x0) r6 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000100)={0x9, 0xfffffffffffffffe, 0x3, 0x80000001, 0x7f, 0x9}) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:07:49 executing program 0: r0 = io_uring_setup(0x157, &(0x7f0000000040)={0x0, 0x0, 0xd, 0x0, 0xffffffff}) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0) r5 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x0, 0x80) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0xffffffff, 0x2, 0x4, 0x1000000, 0x8, {0x77359400}, {0x3, 0xc, 0x3f, 0x5, 0x40, 0x69, "7f9c041c"}, 0x7249, 0x5, @fd=r2, 0x91d, 0x0, r5}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x600080, 0x0) r8 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x492492492492778, 0x0) io_submit(0x0, 0x3, &(0x7f0000000480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x48, 0xffffffffffffffff, &(0x7f00000000c0)="54a84f46235c6043acdd9cd66aec9447c4b5a88b0638799474a43f4fb5f24f1c9d9169326e357e649b5e01ae81768e7219994faca7399a2e46194ea347aee546fa42539494025513fcbacd8a69586eb8c0e707b39320e44566be0674cd6e6de5cfa89084d697563ebaff0000000496d851fa", 0xfd26, 0x401, 0x0, 0x2, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4b7f2ffa0d143587, 0x9, r2, &(0x7f0000000200)="afd967b7b9f3ef889383a9d6600afb6de50d5bde16432cc6ab7f81de7470f02ac0117be4178b64272e1c7f0000d8e6e559912845e7c4a29b43d8cbc148145c93ecf1f6f81c187529ecfe3518cf1beb2e9f6040246d568f2938862d44aaee99921f50f7b8dc9dcedc0674db3b21343c1af8dd46da9f19b8cbf700", 0x7a, 0x80, 0x0, 0x1, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0xb, r8, &(0x7f0000000380)="01b03246b8bac4744fe80ccf5560a6d4ba137c1f52a3188a37540d089fb3260ce240336e41359858567a9f36e89aa0ebd70ab87d8a263e98f42c60051881082a3b31afeed4fb2a6489652fad7dfffbdf62b30eb0b2fa0dccc7fae7129767a6e95de22ae1f0c51a6c5ea5f8ae02e562629d1149907181753b1fd072174232837989e10c95f8038cfb61e1fedffde491612dadbb5bae74d7fbf7ceda708701be3545215afb52efd62e3254617d61f73f3ee5fad4", 0xb3, 0x3, 0x0, 0x2, r2}]) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0xe) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) 06:07:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x1000000}, 0x0) 06:07:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x2000000}, 0x0) 06:07:51 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() ptrace$setopts(0x4200, r1, 0xfffffffffffffffd, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace(0x4207, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 06:07:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd26a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:07:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x3000000}, 0x0) 06:07:51 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0xb3, 'syz0\x00'}) 06:07:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a6d) 06:07:51 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x8) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0xe) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x5051, 0xc77, 0x7}) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x4, 0x4) 06:07:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a6e) [ 1400.951908][T15322] device batadv0 entered promiscuous mode 06:07:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x4000000}, 0x0) [ 1401.002654][T15322] device batadv0 left promiscuous mode [ 1401.035687][T15344] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:07:52 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) wait4(r2, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:07:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xa000000}, 0x0) 06:07:52 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x6) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200000000010004, 0xb) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x8a03) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[r2, r3]}, 0x2) 06:07:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xe000000}, 0x0) [ 1401.462971][T15322] device batadv0 entered promiscuous mode 06:07:52 executing program 0: r0 = io_uring_setup(0x65, &(0x7f00000000c0)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1401.521673][T15322] device batadv0 left promiscuous mode [ 1401.621480][T15344] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:07:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd36a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:07:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xf000000}, 0x0) 06:07:52 executing program 0: io_uring_setup(0x65, &(0x7f0000000040)) r0 = io_uring_setup(0x972, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x1, 0x216}) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r3, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x238, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x63f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x463}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc30}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x311c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffe4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6161}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x185dfe5a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7c5000}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) io_uring_enter(r0, 0xffffffff, 0x0, 0x2, 0x0, 0x0) 06:07:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a6f) [ 1401.972171][T15403] device batadv0 entered promiscuous mode 06:07:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x3f000000}, 0x0) 06:07:53 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) r1 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x100, 0x400002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r3, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x44}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8008000}, 0x20008800) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) [ 1402.083899][T15403] device batadv0 left promiscuous mode 06:07:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a70) 06:07:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x60000000}, 0x0) [ 1402.269516][T15428] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:07:53 executing program 0: r0 = io_uring_setup(0x6d, &(0x7f0000000040)={0x0, 0x0, 0x3, 0xfffffffd, 0x3d7}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) preadv(r3, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000740)=""/166, 0xa6}, {&(0x7f0000000800)=""/28, 0x1c}, {&(0x7f0000000840)=""/176, 0xb0}, {&(0x7f0000000900)=""/220, 0xdc}], 0x5, 0xffff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000005c0)={0x6, &(0x7f0000000580)}, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x3) tkill(r4, 0x13) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffe, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000580)='environ\x00') ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000640)={0x9f0000, 0x40c6, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x990966, 0x8, [], @value64=0x3}}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x400000c0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1402.611307][T15403] device batadv0 entered promiscuous mode [ 1402.660916][T15403] device batadv0 left promiscuous mode 06:07:55 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2000002c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:07:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x9effffff}, 0x0) 06:07:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a71) 06:07:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd46a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:07:55 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x3, &(0x7f00000000c0)={[0x3]}, 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) waitid(0x2, r2, &(0x7f0000000100), 0x10, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz1\x00') connect$rds(r1, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x2}) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setfsgid(r5) fchown(0xffffffffffffffff, r4, r5) getgroups(0x2, &(0x7f0000000280)=[0x0, r5]) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x20000, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[], [{@fsname={'fsname'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@appraise='appraise'}]}}) 06:07:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xdd0d0000}, 0x0) 06:07:55 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x901c8dbb32cec53d, 0x8) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:07:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a72) [ 1404.419044][T15454] device batadv0 entered promiscuous mode 06:07:55 executing program 5: io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0xf}) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), 0x4) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000180)={0xf000000, 0xffff, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980001, 0xa17, [], @p_u32=&(0x7f0000000100)=0xec}}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0xe) io_uring_enter(r0, 0x3, 0x3f, 0x1, &(0x7f00000001c0), 0xfffffffffffffe01) 06:07:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xf0ffffff}, 0x0) [ 1404.480476][T15454] device batadv0 left promiscuous mode 06:07:55 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x40884) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x840) ptrace$cont(0x18, r1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0x1e2, 0x3, 0xff, 0x9, 0x1, "787b3dfbc234d6cf1cc03f22b7fa864c9bcbb5", 0x1f, 0x6e57b9c2}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1404.539133][T15476] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:07:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xf5ffffff}, 0x0) 06:07:56 executing program 5: r0 = io_uring_setup(0x4324, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x400}) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:07:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd56a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:07:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a73) 06:07:56 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r4, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x4d, 0xac, "c371e905a3bc3fd35b7fb5dd5faaf6ee9a9eb3ee02ed5d3675639dadb8b9c0b2eeda1a61c93b82e432963bcf394bfb2d48d8bd614dc16e2608a367194cbc0a0badd792911af661c5ef"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x49}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x90}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xdd1f}]}, 0x108}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x5, 0x3010, 0x9, 0x7}}) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:07:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a74) 06:07:56 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) splice(r2, &(0x7f0000000100)=0x3, r3, &(0x7f0000000140)=0x3, 0xc588, 0x1) 06:07:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xfcffffff}, 0x0) [ 1405.529506][T15504] device batadv0 entered promiscuous mode [ 1405.603996][T15504] device batadv0 left promiscuous mode [ 1405.614938][T15517] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:07:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xfffff000}, 0x0) 06:07:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xffffff7f}, 0x0) 06:07:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xffffff9e}, 0x0) [ 1407.367544][ T0] NOHZ: local_softirq_pending 08 06:07:58 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket(0x6000000000010, 0x3, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x2280, 0x0) sendmmsg$alg(r2, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="f6f3c7aba699f7882d5dc9b096d352577d62cc46060a47a6a2d71ed5", 0x1c}], 0x1, &(0x7f00000004c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1018, 0x2400c800}, {0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5242d64a6d2641dee6dc81b04a43d69d8a702f2e0efbe4d1db452337338071b3917213bcb0c06b6028661ecf9987c464939d16b81bf6ae6b19858be29f37e631e1aa2a04c1615cb489f9c5fe195a1eea0192f9926b5669054bcbed7e0f7f4e5e04bb144cc85490a664fdfb13f1157a312904b8923794fd62aa322bd978993aaa1662bbaa4a8f4114dfedb9cfb817b86f667835e1c951cb8a3476d494798bfb08d7a95c169592e03012b8a1b80fa44350d849cb060e21bd43b47244fe83cfffaf7112b1e01da48ded6a2536d2e1947acca35feea7a4d38e65f5b18612fbb98ff2504a26823f0bb4cf6dcd", 0xea}, {&(0x7f0000000200)="53ac66f39f63c8019dd6caf8884a1a19797c399be9b8d5706794b80129243d7696e80607715de52fd2e5de81d2e6bfd85fbb60427a76683cf56088a86d247a081aa8f15198627bc7e105253e7189a65542daf62780a2c3dd5c2f49400da8e765b1e5e130a9cb6ba41951d89e688555edf1f8dfc68bfc8b5c11484d2bdb8c34abb675a6bb1754462227b13ff7862fa6ee4d6aaac234d221fa7b8ffc1fec5d977c90f9adcba1f5a4af14ab87791c737769a6caf3fa515b7240d56649499cca8afb27648587b7220033be0593c651166e216d2d20802a674680ba8e1bd6fa7df91f73", 0xe1}], 0x2, 0x0, 0x0, 0x840}, {0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000340)="9aae9e237247aae0d135a94a20f3b0096e1fd6206c16c9968a2550c0f832201f4cb6c7480f9612f908b792eef949aef0af5f7716384caee4153e702c69206c9a2e73d3d1c102e01ed834dd94aa77b34d4139afb2ac6927", 0x57}, {&(0x7f0000001500)="49329fe93682d71d310b3e981c733e3f1baac1e192a3e9a9e38783a13d27a79e62d77ed683dedd9b382307f43891e6f838b52018d098c48f8350f6b90a8740e224924f13bfb41c690618cfd404078e88daa51556c82db2b1fe48d9eded17a8e7a982abcffdcf63c1", 0x68}, {&(0x7f0000001580)="a5b7060cc935813f1b8cd18791cb86f3e4c6c8a9dbb214371bda094a8669419c03eb54c3646990c26507849b9f572538bd9edb7d1c394e01d3f6935a1d71ba4e58ca3ad5fff17e4051cac90f091417595311fcab5c69201eb56c3b0577f67f7c83ac5b77ba380862b041c5629d8e111315a533b74c6b0533f7cd7def5ed089c71869537102a896623c010114fa1732c068a7b3ad3d298e1abd736cdd338af9d92ea932223ed61640dfcb8a2f3e11d06e0699b94a0937a3f5dbfa0b1f2344cc405911a4bb5f9f8cfcbc4d1ac6e4a3a981ec240b77c4790b9bdff12f5325d1fdc65ef500e7c98b92b7c91cda5c0ebb9f7a4a9be50cb4c7", 0xf6}, {&(0x7f0000001680)="ab0a08a9d87eea9dcb4a47f227b62b9235aeb445f284236149d158e4679d0794097eca665757827f40d811f6078ea16bc6907ef0418196e2261306025cefc0685354ef46628cf75ab71a6a7a3b25ac9850868c07e912aff208dfe65d790df1b7bb709303036672cb94e762f5a506eba9b193a08afeada27db66b600a808a1fd0d2aef2831db9785a955fc2d22265832c1740d847f07e0973ad556502892aa814939bafb31e897a6a4978e957884a81cbc7e18cb353f610a2c4335872", 0xbc}, {&(0x7f0000001740)="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", 0x1000}], 0x5, &(0x7f00000027c0)=[@op={0x18}, @iv={0x58, 0x117, 0x2, 0x42, "ad682f2c73fca3a765300bce500fec485dfb99c3e984a8ca74ffdc1952f8f79101757c49937bd991f8eef8989374c3925123eb650e5a0028bd4b4d9b7f1f537bf0d7"}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x88, 0x40c0}], 0x3, 0x40000) fcntl$getown(r2, 0x9) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:07:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xfffffff0}, 0x0) 06:07:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd6000000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:07:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a75) 06:07:58 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x4) 06:07:58 executing program 5: r0 = io_uring_setup(0x2065, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:07:58 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="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", 0x110}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0xe) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0xa30000, 0x7fff, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980922, 0x8, [], @p_u16}}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000100)={[], 0x3, 0x8, 0x2, 0xd2e, 0x2, r3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1407.682466][T15552] device batadv0 entered promiscuous mode 06:07:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xfffffff5}, 0x0) 06:07:58 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:07:58 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x9}) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:07:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a76) [ 1407.762248][T15552] device batadv0 left promiscuous mode [ 1407.858481][T15580] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:07:58 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0xe) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000080)={0x317, &(0x7f0000000040)="e779b97888cdad9065d44fa724ac266fb1425dcb3ac929222787152fa2e69b3e5159069649db39d60a0f8a003d3ab17b"}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:07:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xfffffffc}, 0x0) 06:07:58 executing program 0: io_uring_setup(0x65, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0xe) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='cgroup\x00') io_uring_enter(r3, 0x2, 0x6, 0x1, 0x0, 0x0) [ 1408.064117][T15604] ptrace attach of "/root/syz-executor.4"[15599] was attempted by "/root/syz-executor.4"[15604] 06:07:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd6050000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:07:59 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) wait4(r2, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x2, 0x1000) 06:07:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xf0ffffffffffff}, 0x0) 06:07:59 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0xfffffffc, 0x1, 0x0, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "3b3ef9d82bc696fb", "2bc91fa333937e88f08e0434552ae8c9", 'A0GA', "4846688142336101"}, 0x28) 06:07:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a77) 06:07:59 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ptrace$cont(0x20, r1, 0x0, 0x0) 06:07:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x100000000000000}, 0x0) [ 1408.421138][T15624] device batadv0 entered promiscuous mode [ 1408.491167][T15624] device batadv0 left promiscuous mode 06:07:59 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) 06:07:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a78) 06:07:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x200000000000000}, 0x0) 06:07:59 executing program 0: r0 = io_uring_setup(0x65, &(0x7f00000000c0)) io_uring_enter(r0, 0xff, 0x2000, 0x0, 0x0, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="83c1006f51a312193c97c98bd3abd5b4638b8b09", 0x14}, {&(0x7f0000000080)="0f2461f8080d9d996c0b2a23a832aa0e777d", 0x12}], 0x2, 0x0, 0x0, 0x40080}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="94c3c6c08c4565fafd5385ba1927efa058e03d529b51e36fbd5627d8d726aec51ff507d318820e83a6c4eb1d1e45417d", 0x30}, {&(0x7f00000001c0)="1a5770be6e4c19d68232453eb58356f1913989e8fdff38242e09dd9781304c6e5a457790b451a3968f8278efc39c1af88c5cd2bb6c3eb09df8d7bd8bdd48270636d5bb4c2f32f04de296d327f58e799d5fe4d4452c637a490a9871bb4327be788213f11ec4af51b8446edc914cc8a80e2f36af769dcd5865dcac03eadbebe904861857e7a44112107923df9c3219c6f5841110f18e0b5fd0111b2c12918fc415062a9275f63ace82407742a5bb6fa521eab17494991c53e162463c16e60dc2e340ab4b686ce05a9f9a687969e16073b5b34f377db4fabe65e458c31a2d205775cca0a8962c32da33851c097121cd6e6564a82ab0", 0xf4}, {&(0x7f00000002c0)="b48c49bcd9b35f24ba3f97d4a6236ae30b7a47ce6a68562592a61aea3c9539ad08d83ebdbe5e932a4da4b5cd7168b3836cd6535e18f1706f9a0de1937fda0199cdb8fbfed093ced91254723c415f07ed2bfc2c07a59046360d93d78d4076d8bc18e20487ce70a93d31318461d550b1b25bd6afb7a0b655a207d5201c4d5c45ae097fd5c33274f4bd98dd85ca6f8d3dc58dac5b166a65bc27aafd91d5b8f0f6582c887feb214a115fd6f46482fb07890ff8374f265591bd25814874a6b9d7fe4be0dbab963a7731c98d2fb1304bcaffa1c4847c75a646e24128bc5b0fbf889cee5a9017e9f061700c78fc", 0xea}], 0x3, &(0x7f0000000400)=[@iv={0x78, 0x117, 0x2, 0x64, "35d61873fc6eba8d706d8b5ebc19ed334a84282f22aeb996fa390f7edf14f84ef3a2325ccbfe14582cc8dd3141b14e8d8c3e255545e7fe3ea22e8ea4471cfb8e7e09fc05ed532159eadae91bc76ebc393e86fe43fe71d1adc1365fc5033d312971a5deaa"}, @iv={0xa0, 0x117, 0x2, 0x89, "d6ad2bd681bfe824f20b4a416e84f0043a51640495fc8c8fae3f4b28423d52c79bcf6bbb6d5ed488d6e065b44738d103c4fc4d4cb0d09fffdc3e8cf8c487cf8fed49f5af4136ae3ddbbd656ae6f3b28cc25e7fb9dd05eae0443bc25ba7e1afc3afbfbbc8a9af5e82d31a90a80b697d5036a7953a926b6929b6904fb83ce2031f3ff8c3de27cd182364"}], 0x118, 0x1}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="42b4009aad677d70b31c0a276691890c343027", 0x13}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="058b33cf949aff0154f7e77074c1c7cdeb9253db80acada417fb67d9b039de4842d8c0f798d814469d220c", 0x2b}], 0x3, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x1048, 0x40448c0}, {0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000016c0)="33a880be6833c898cd5bdc5e82bea68d9f322a4334ddf930b3aae72b1941545262a3346f98a66733441060a8ba60d3803b05aa8e24bb9aa968c343a9773598c60bbc2493f2c0b4c6371b0de00a572ebe2538532685f93f6beead70bebabb049a7c52cdb3e9b8d5ea29e7768c5ab64450d5875bc45231e8d96b21c98f5415fa5ba7f0e7fa4fc3ef90c59454b49ce6dfe8d4e0b0d3d0a80d8bdf65d0f0464c5d99392886c78bce7d4988ff92cef3f1758228f1832879eecc1df0fe0afb8cadc2b402f7fa40208f9cdc8132fc34083956fa5b486d6c", 0xd4}, {&(0x7f00000017c0)="c31550f3c64e45aaca4587f7dc585e03e54cf8d3dc7ac07bb0ed6068aba2fdc0f7d10efd3ccdb8f41bfe5415d52d3fef686b64c09018f45fd9b8d60baeffa3a850bc9c83a27065e032dff39ffeb9d6a70c74316aaf5e9fc0014c74f0c4bb76b479097e0147fcbb1416ee7467da34e0e1f01be553cad80b2cfdf557de158e06a6bfea270e5805af4efab69d4787577e891017cf3d8251e217581d5b6ceabb3b623feccacb57c7790e5d7558dac1b47b72ab9df7dae5cfb6979090a7e5ed78c892e5bba61a431a405d02cdbccdde45425c206540d53f49f7c3309be9", 0xdb}, {&(0x7f00000018c0)="2c523f4b46468b050fc12f6998458b793559aaa52cabfb4406e7f54b252cfb4f4054f2202fc6ccf1337dd34578e0d308", 0x30}, {&(0x7f0000001900)="625becb83644847f7218e1b2308620daa8cdada500c6e5e553ca8816198f32c68035b19bdf300ac345a409169797d675af92ab9fc5ef3bf9693e1d369c0fe0632773cb4abe2c49b19ed3454870c4ab27e4c5c86f085aefb5abbeddf415", 0x5d}, {&(0x7f0000001980)="5dfe2fd5fc44b5cabc84ecebf3e0832c67c58344fc74e060a575164748569e731bc7859116ab3ced2de0e17b6551af3dbbfefa57c4a63579fb52ca0490226ea7504d7286b89afa496320e6ff7d4f25db6ee1a1511b677da34cb43ad8ad2d8eca00c886259b48ff823a21e352d784ad4bced6ff90fa4d913f82689c083906177b27c1d2a1414a6096b6c55c97bd610ec5cc6ebb89bc8e958fe533207bbe3fd01a8675e362b3d01b5226", 0xa9}, {&(0x7f0000001a40)="7b162ab2c3334b330593ddbea7f8df6c81add0a8da3a9ca09675480dd6d6f30104e6ad22c48b313e48a1e50dba3fe42aa5347358a7abc6b3d81be99741d6ab007577d3f5b41a39198f68f68f3896af9ea773a9f820b8a2422f840bdd16146980f2d5eb56b85a3afd8ef160b41fd1591a2be349ee9128569c385b4d9836b02315ebf0a75b109e69f6f7f7de1ce0ccde9b520d5d236f25ae59f784a781eeec16867a459c782651946f41ccb1e8becbfa1b", 0xb0}], 0x6, &(0x7f0000001b80)=[@iv={0xd8, 0x117, 0x2, 0xc1, "ac7a5d486572fa2bcac9df54ec79f10f208cd4e943b62082a93ad16195c41a0c59507311a6af9aee5257439c450446f319991b50a8d6ef91861113300cacbca6548b3f541e2636cb20994450248bc0a1b9fea310d3e90ef3d391f3d83690f29972952ac8c378a7c7790f99d3ed1bee20c5a1b058a5b2a61b626d365e90534ff932c57830963133e73b346afa2794876d78b7e656612e0f22aab49f48d53650a0d3705d14e869a71948e025c74e51c5cd5da209156a5ea89e2b830f259c6c8c6af6"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x10f0, 0x1054}], 0x4, 0x20000000) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 06:07:59 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x4, {0x27c, 0x80000000, 0x30, 0x9}}) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) r3 = gettid() r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ptrace$setopts(0x4200, r3, 0x2, 0x40) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x103000, 0x0) ioctl$USBDEVFS_GETDRIVER(r5, 0x41045508, &(0x7f0000000340)={0x1, "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"}) ptrace$cont(0x7, r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000140)={{0x2, 0x0, 0x40, 0x5, 'syz1\x00', 0x5}, 0x3, 0x400, 0x400, r3, 0x1, 0x1, 'syz1\x00', &(0x7f0000000100)=['\x00'], 0x1, [], [0xfff6, 0x8, 0x6, 0x3]}) [ 1408.738015][T15640] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1408.811140][T15624] device batadv0 entered promiscuous mode [ 1408.890423][T15624] device batadv0 left promiscuous mode 06:08:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x300000000000000}, 0x0) 06:08:00 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:08:00 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:08:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd66a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:00 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x0, 0x2, 0x25dfdbfe}, 0x14}}, 0x4800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4014) 06:08:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a79) 06:08:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x400000000000000}, 0x0) 06:08:00 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0xcf221b3883cb8c00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0xe) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000000)={0x3f, 0x61, 0x8}) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1409.341495][T15685] device batadv0 entered promiscuous mode 06:08:00 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0xdad, 0x0, 0x1, 0x0, 0x0) 06:08:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a7a) 06:08:00 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000000)=@generic={0x2, 0x5, 0x7}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'gre0\x00', 0x3ff}) fsync(r2) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1409.418525][T15685] device batadv0 left promiscuous mode 06:08:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xa00000000000000}, 0x0) [ 1409.501864][T15710] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:00 executing program 4: r0 = getpid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(r0, 0x0, 0x20000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200000, 0x0) sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4c855) ptrace$setopts(0x4206, r1, 0xffffffffffffffff, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3bca225cc62498bb2af89b05c133982a26813c7cd336adad804d948677e4adb40500000088738dd2bbf0e2087841bb532a2df8ee95cd02dc77e36be39048fb667c490dc60679cff52938") ptrace$cont(0x9, r1, 0x6, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x1, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000040)) 06:08:00 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1409.755628][T15733] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.4'. 06:08:01 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0xe) write$midi(r0, &(0x7f0000000100)="fde0c29e5dbbd4d19237c79cd1ddd6b3ca4f94a3344d919c0f7a85f95ed14032f20ac1eb63d4012f241a47cfba087a271e559d3d4d56c7e26102805877326d8f849704ad2506c23f9fab2b297f9bcbb1a3899e973ec48a94c565e5bd728dcda709f02716ef23647ec637eca2686f", 0x6e) r2 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r2, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1e) 06:08:01 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x9c0000, 0x1, 0xffffffff, r2, 0x0, &(0x7f0000000100)={0x9a091b, 0x5, [], @string=&(0x7f00000000c0)=0x7f}}) ioctl$KDDELIO(r3, 0x4b35, 0x666) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) 06:08:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a7b) 06:08:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xe00000000000000}, 0x0) 06:08:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd76a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xf00000000000000}, 0x0) 06:08:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a7c) [ 1410.250369][T15749] device batadv0 entered promiscuous mode [ 1410.338783][T15749] device batadv0 left promiscuous mode [ 1410.344639][T15764] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x3f00000000000000}, 0x0) 06:08:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x6000000000000000}, 0x0) 06:08:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x9effffff00000000}, 0x0) 06:08:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd86a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1410.817602][T15784] device batadv0 entered promiscuous mode [ 1410.870616][T15784] device batadv0 left promiscuous mode [ 1411.180216][T15784] device batadv0 entered promiscuous mode [ 1411.219697][T15784] device batadv0 left promiscuous mode 06:08:03 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x1000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e19c365165", 0xc2}], 0x4, 0x0) r2 = socket(0x6000000000010, 0x3, 0x7fff) sendmmsg$alg(r2, &(0x7f0000000140), 0x0, 0x44000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x129100, 0x0) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x2d01159e9d27334f) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x5b6, &(0x7f0000000200)="b46d9e692e20dd47d450ffdcce2651007c1251a6db60574719e3b02205298edc228f56c3ff1f50ff7852f16626ff073e9667b4579ecf45b76f73a1269c32ad36c7d21657ce1a7eccd5bf71a572f240c03a5c98eb9787c6b8368ee42613bec5980688e8342b0a4d13a8be182a5a88a50fb376cc315f0acea78f308e19dbd541f6a9dae124dce4e34c648d330172eff8429f8990ef353293669834f1e3aab2c1648cd7ffbfaf4ca232032c6ff2ab0d2bf35743b3f19c6e") ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x3, 0x0) 06:08:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd96a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xdd0d000000000000}, 0x0) 06:08:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a7d) 06:08:03 executing program 0: r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) 06:08:03 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x40000000, 0x3f, 0x1, &(0x7f0000000000), 0x8) getitimer(0x2, &(0x7f00000000c0)) 06:08:03 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) tkill(r1, 0x25) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) ptrace$cont(0x7, r3, 0xbe3e, 0xffffffff80000001) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xf0ffffff00000000}, 0x0) [ 1412.812827][T15808] device batadv0 entered promiscuous mode 06:08:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a7e) 06:08:03 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0xe) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) io_uring_setup(0x40004da3, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x289}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x1, 0x0) io_uring_enter(r3, 0x4, 0x3f, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) [ 1412.905233][T15808] device batadv0 left promiscuous mode 06:08:03 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$get_security(0x11, r3, &(0x7f0000000000)=""/24, 0x18) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1412.994552][T15831] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xf5ffffff00000000}, 0x0) 06:08:04 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_GET_NO_NEW_PRIVS(0x27) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1413.470182][T15808] device batadv0 entered promiscuous mode [ 1413.510006][T15808] device batadv0 left promiscuous mode [ 1413.611901][T15831] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xda6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:04 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = socket(0x6000000000010, 0x3, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4200, r3, 0x2, 0x4b) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0xef00) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) 06:08:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xfcffffff00000000}, 0x0) 06:08:04 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={r2, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={r2, 0x9}, 0x8) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0xfffffffffffffffc, &(0x7f0000000200)="398c4b084ffa9087341bb37aae157cb73d167eea49edd91d80c77fd3bba8efe3e27dbaa4b73e4419f733e9d8554feba209c1001000009a62b347886562a4cdd2ce5abac576fc7a0049ae918a763deb5644c534ec708ce80d61b61a317553ed7fee549de6c84ee68820e3925656e87b10d0557dd5dbc5a323e66401e17d7e343022c06a701769a06243579326dcfeb84a7688026b7391eb3e2722240d887efc25d5aac62d5140a1b61014054085a3868eebf54d1703f53a7ebb3225ae4056f7eeec47cd405df07305c8596b5960c4dc5e4a6aa30bca3e53cd01f6d7a14d9bb615650074260446a8") ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:04 executing program 0: r0 = io_uring_setup(0x65, &(0x7f00000000c0)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a7f) 06:08:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xffffff7f00000000}, 0x0) 06:08:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a80) 06:08:04 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@local, @loopback, @ipv4={[], [], @remote}, 0x2, 0x5, 0x5a, 0x100, 0x0, 0x4040002, r3}) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000000000)={0xe, 0x81, 0x7}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) 06:08:04 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0xe) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) r2 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r2, 0x0, 0x0, 0x1, 0x0, 0x0) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x98, 0x1, 0x6f, 0x9}, 0xc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000100)=0x51) [ 1413.960319][T15895] device batadv0 entered promiscuous mode 06:08:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000001000000a14000000020a5d2e000000000000000000000000140000001100010000000000000000000000000abb7ff41868f05433b892f71d84e04fcea99c0b0ccfa53936145432e06bb055941048f76d4cadd86fb3a1c414358096e582a5bf30"], 0x3c}}, 0x0) r4 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r4, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:08:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xffffffff00000000}, 0x0) [ 1414.019236][T15905] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1414.043091][T15895] device batadv0 left promiscuous mode [ 1414.429963][T15895] device batadv0 entered promiscuous mode [ 1414.489031][T15895] device batadv0 left promiscuous mode [ 1414.615336][T15905] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xdb6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:05 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x81, &(0x7f00000003c0)=""/168) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) vmsplice(r4, &(0x7f0000000340)=[{0x0}, {0x0, 0xfffffffffffffe93}, {0x0}, {&(0x7f0000000100)="0100000000000000000000000025d80000278dcff47d060000805acf4f8f36460234432479aed753492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb37ff997560c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6f6351415efc82d57c047d474071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xc4}, {&(0x7f0000000200)="9afa054bdfe1441885009c7f12db20489ae838f28ea8cbae8aee1c9a98e38bc9ba8d765845e12ce34a2afe170bbc1c9dd6bc6418712f8be01a68fae74616b71dad5b24477452736cd7d5721bae42d3a83b4eeec02fb168af2fbeacd37a34f28bac8f9cdec8ba5870cf7ac7953d8ab6ef52b6c361c8fdd54010eec960b6b0ac5cc57a829c85507e13634bf700d5e8eae078231614f603ddfa5a0a36f8be2247f60124f80a34538d2843399e071e0c15336c002921e64620713f505bba40bd7ec7739f6cc3cc9025d95e5d20dc8a2dc615acbdafb7f5", 0xd5}, {&(0x7f0000000040)="e9ebaf0108bd5430f892196517845a269cdeb57bd106d771ad12988a858a", 0x1e}], 0x6, 0xb) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={0x0, 0xfffffff9}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00\x00\x00\x008OxQg'], &(0x7f0000000540)=0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xfffffffffffff000}, 0x0) 06:08:05 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) readv(r2, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/253, 0xfd}, {&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x7) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 06:08:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a81) 06:08:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a82) 06:08:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x2}, 0x0) 06:08:05 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000000)=""/148) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) gettid() ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 06:08:05 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x1, 0xf}) io_uring_enter(r0, 0x0, 0x7, 0x1, &(0x7f00000000c0), 0x8) 06:08:06 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0xfffffffa, 0x7, 0x1, 0x0, 0x0) [ 1414.972248][T15967] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1415.010954][T15957] device batadv0 entered promiscuous mode 06:08:06 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 06:08:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x3}, 0x0) [ 1415.084193][T15957] device batadv0 left promiscuous mode [ 1415.449947][T15957] device batadv0 entered promiscuous mode [ 1415.522041][T15957] device batadv0 left promiscuous mode 06:08:06 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, 0x248}) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:06 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10001, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x10005, 0xe) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[0x6, 0x101, 0xf7], 0x3, 0xffffff7f, 0xffffffff, 0x7d5a, 0xfff, 0x3, 0x1, {0x36b40d30, 0xeef, 0x5, 0x2, 0xfbff, 0x8, 0x101, 0x3, 0x2, 0x6, 0x7fff, 0xbc, 0x7, 0xca8b, "42aae8822d7c8593127b4093bef5dcfbe2c7f53f17168ec9992dc691b43f1980"}}) r5 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x32, @rand_addr=0x8, 0x4e23, 0x3, 'nq\x00', 0xc, 0x1ff, 0x47}, 0x2c) pidfd_send_signal(r1, 0x9, &(0x7f0000000100)={0x23, 0x0, 0x1fd}, 0x0) io_uring_enter(r0, 0x0, 0x44, 0x2, &(0x7f00000000c0), 0x8) 06:08:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x4}, 0x0) 06:08:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xdc6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a83) 06:08:06 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/186, 0xba}, {&(0x7f0000000180)=""/115, 0x73}, {}, {&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/128, 0x80}, {&(0x7f0000000380)=""/219, 0xdb}, {&(0x7f0000000480)=""/89, 0x59}], 0x7) 06:08:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xa}, 0x0) [ 1416.012148][T16018] device batadv0 entered promiscuous mode [ 1416.119308][T16018] device batadv0 left promiscuous mode [ 1416.489750][T16018] device batadv0 entered promiscuous mode [ 1416.529016][T16018] device batadv0 left promiscuous mode 06:08:09 executing program 4: getpid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/80, 0x50}, {&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/136, 0x88}, {&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x5, &(0x7f0000004700)=[{&(0x7f00000014c0)=""/172, 0xac}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/184, 0xb8}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000080)=""/16, 0x10}, {&(0x7f0000003640)}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/71, 0x47}], 0x8, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:08:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a84) 06:08:09 executing program 5: getresgid(&(0x7f0000000100), &(0x7f0000000ec0), &(0x7f0000000140)) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="2be8348b93139f2b5b53ab745b399185e40fe0149420d502df8c79737883e1f4f567d1531e09b255c89ac3585321ee60c43e3fa47761f71ec897245285a9168989eee5cdf68315f0544d51a3e4912b0346ef19056321214b83bc0f410aed71e89579756fe95a3c5f37ad3b1a5471409ce89125dc5916a4b23085"}, {&(0x7f0000000240)="18d735ca840bc5fa5f7b02d9e7a83c0efd8a1ec3a98639cfff9151fe2c0be2170f884342"}, {&(0x7f0000000280)="93bbb4afb1555112be5bb1a6177b542ae1f27e5ac708109b35f84f32399f1090c198e5479e81a210cca1941bd4d1910c9a30efb1a0c57e282b8cefbea92005234f9a519c84df4b3c68f69175f3b2859a655d75c7f1ba21e8d80d8567e6cd6a2bd9de2b1c472f6bb5c73ada2b4eccca7eff7a77c9b61e9f5af49376b32e5cd82374114c4ba99c2fd746ce47b8710a7584c3e9b74935928297aaebcab1e1898f717c6f9943432b6efe18fa55423d7cd62f7c7b"}], 0x0, &(0x7f0000000380)=[@op={0x0, 0x117, 0x3, 0x1}], 0x0, 0x41}, {0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="0b474fe0fd0c32409b3b73395223a64f2bb41603b04ec79e0c327a8e0d7f46eb034c263e36"}, {&(0x7f0000000400)="c0f4d68c204bdab6658c892101eb1d71ece45a8bbbb23b85b79e0c03359d9dfe729c5523e2171c149c5421723f321ce831dfd681a60de1ec8e98d62b53f9b7114144c71b027abd609e6fff22a1212be23614f0af77532fb94dc586be66d7ecbbdf08035efb8cc448868510529e52b2bf0fc05ef0dc342f953cd8bbf54fd1fa66f53e1827b396b0fd82a6e4bea21fd95a4f884c69b3538911d91012f2afaff50479750e15cc8e7e6a7981ee29a20576250adc6100c5e5749f7b9659c34415fe3cbf9c47e42196"}, {&(0x7f0000000500)="2a720869431ba74c901631229aba9f850e4b40fcfd8cf87e30907eddfeb0951a7219a3fe07be870835fecc8d731107136af3ba7a1246e566a457cc13b795cf75f132f434b9d9e61a0e467971b277defd54a68e84220c68f5a9f39b96a823241b31147cec90d9fc351fd870775458b9fd2e79fdcc55d6ce19b7ee82a5bfe516b712"}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="ea29ec042aff04db2347f538f2a1b37ce1631fd2c686dc73fc43453952218c9c6c345a151d563e6b5f01da3b3390d00c8617d1f925d58362cfdbe84cb6e7b6410577e128f3552bcbd15338f159d20f8bfb140675943f4347bbfa1536424a00918858c14a7dc21ff35e2b07888f007b3d17c5fd4ad9d26bdc864901859d23401b83ee08fcac5b71cbc34ef5f008e3bae45e6b307026b6106dcde2e66fb40e49d8a11a5f68c5ab46680724e89d67e8bf08bd9bb79676793ec3e8"}, {&(0x7f00000006c0)="36eaac8929921256e50e0cd80cf2c76270b0ab1651d7d6a6a28b54764929bb83467bc1b080000e6e6b37cd2f6c6b1112881ed07438a9592a931ea3836d14312a4c93f4e3009346fc01ecabe862de50d95f1b7934aec1b60d4f05b66a68ad69f7230f129f60"}], 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000007c0)="1ffe39c2573d2d396bdbbf80731a6d4f7902eb5d99770606c211faa6063b456df8f885cc92e3a2b1b5ca3ad175d91284b4459febc37dc9c4f8900c42b87b0d2e05e09a8cb7bcd6410aa6796e7da5da41bf8afe75b5da7e0867a7b4413e5057988a365a9c16bc935c59f372a80d9710e13e0a6caad4e4c4afc8ea7ddfd5961ea912c34eaf2f2bf64316bfeaf54e8ba3dd0ecae41e9c7c7ceb18b95a42613f7a35266b26707733ec85838e037ffb31a58c57f7a66709f9415c2ad9849569b880d3743fe0117eec6d1ccce8a1850f101946a6d9a93675e79da525b7ed61ceac3d92785b8758605ab397bb21da95d28593"}, {&(0x7f00000008c0)="43f43b28c0c7e3b4be0f3cee1a3078084954d78583a82628c62784330aafec541e1132cf9185f26909397e3f70441e92badadf3f36eb1c7a249d412cefb927e32271d0bde3a78cd9113009677ac50096a8bfbd8a04a538f5d4527b0a9d9aca7214f5a2d41315ac6aa753a9b136ab4e46a2cf6edbaf016a37839c8df4370dd990ad3bc40a11bf272a46aa99666a1f6d391f721f"}, {&(0x7f0000000980)="f683e4931617e0"}], 0x0, &(0x7f0000000a00)=[@iv={0x0, 0x117, 0x2, 0x0, "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"}, @op, @op, @assoc={0x0, 0x117, 0x4, 0x1}], 0x0, 0x24004000}, {0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)="581e4aa9189a45bbe77db78f7ce041ab1e97edf1aa4670ea007fe851c3eeea9080e5536add6037bb9cde773c48d7910022c8d88cf9c68a6c7087af726fc95b15c65308a2338211de49d77995c251b627423bbd54431264cd9bcbeb4e72480ed39ccf8d36f5ba7412dc3adeedc1c147331255dd1bc20b8744305f88397818a3e95353f9b4ce5b735fd96b14ecf6c24ce8a15d4bbfaf77865a"}, {&(0x7f0000000c40)="02ae142bfa0ada49fc31cadf003fe7a64ed004c269425ef095afb5a91c1deab2390071814fd702e610b615683cc45500e9f9a5695ade5c1f426715837b7d61feec36021fb6c78c891228d12dfd030e47a09b920524fd72ecb50dcce26df48e66126c5541a7acbe105814cbc9a7e0e69b6463038d19ce036d914be809206be8e8ee12186e36e22c717d9fe60b7afcbfa713976d8750fa9f528c895080a1dfa3d4fb21dceda8e1410374a809c0375b86be245d624638a0e56e2d3215eb862d309f18991d19b58afe8b68ae727e885df91d322b6bb812e8fc3f4399cd92a4c22e04d5aa2cc565f9dc"}], 0x0, 0x0, 0x0, 0x8081}], 0x620a5d7fdcea3e, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/122, 0x7a}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f0000000fc0)=""/47, 0x2f}], 0x3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, &(0x7f0000000f00)={0x2, 0x2b, @multicast1}, 0x47) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0xe) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000005c0)={0x9, 0x80000000}) r6 = fcntl$dupfd(r0, 0x406, r1) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000000000)) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000e80)={0x1, 0x0, [{}]}) 06:08:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xe}, 0x0) 06:08:09 executing program 0: io_uring_setup(0x65, &(0x7f0000000040)) r0 = io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2, 0x128}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1110c0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0xffffff24) 06:08:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xdd6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1418.123566][T16054] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1418.140745][T16049] device batadv0 entered promiscuous mode [ 1418.163443][T16067] ptrace attach of "/root/syz-executor.4"[16058] was attempted by "/root/syz-executor.4"[16067] 06:08:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xf}, 0x0) 06:08:09 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(0x0, 0x14) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) setpgid(0x0, r3) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)="9ddfedf373873d89c09194d03001f0154e60ff0140679c9e3de5c787f57e29814bc71294cfdfa0efec65711031a85fb94808b9cf4a5207679392b480bfea9339c59f229f4e6d38cff100e32b82e17d06e299cec163c549b5") ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:09 executing program 5: io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x1}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) io_uring_enter(r0, 0x3, 0x3f, 0x2, &(0x7f00000000c0)={[0x1]}, 0x8) 06:08:09 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) mq_open(&(0x7f00000000c0)='ppp0%\x00', 0x2, 0x100, &(0x7f0000000100)={0x8, 0x8c3, 0x1, 0x5}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) [ 1418.250956][T16049] device batadv0 left promiscuous mode 06:08:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x60}, 0x0) 06:08:09 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x0, 0x5, 0xff, 0x9}, {0x6, 0x0, 0x1}, {0x1, 0xc1, 0x8, 0x1}, {0x0, 0x0, 0x3f, 0xc6}]}) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x44140, 0x20) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 1418.362875][T16085] ptrace attach of "/root/syz-executor.4"[16083] was attempted by "/root/syz-executor.4"[16085] 06:08:09 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x10005, 0xe) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000280)={0xf00, 0x4b0, 0x500, 0x78, 0x6, 0x9, 0x1, 0x2, {0x8}, {0x63, 0x0, 0x1}, {0x8, 0x2, 0x1}, {0xb4, 0x9, 0x1}, 0x3, 0x0, 0x6ce, 0x0, 0x0, 0x0, 0x5, 0x1, 0x6, 0x8, 0x8, 0x6, 0x10, 0x200, 0x1, 0x6}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000240)={0x3, 'veth0_to_bridge\x00', {0x5}, 0x2eb}) getpeername$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x20) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f9, 0x300, 0x70bd28, 0x25dfdbfe, {0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x40400c1) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) get_robust_list(r5, &(0x7f0000000480)=&(0x7f0000000440)={&(0x7f0000000380)={&(0x7f0000000340)}, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)}}, &(0x7f00000004c0)=0x18) [ 1418.681120][T16049] device batadv0 entered promiscuous mode [ 1418.739594][T16049] device batadv0 left promiscuous mode [ 1418.838158][T16054] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a85) 06:08:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xf0}, 0x0) 06:08:10 executing program 0: r0 = io_uring_setup(0x4063, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xde6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:10 executing program 5: io_uring_setup(0x65, &(0x7f0000000040)) [ 1419.350628][T16127] device batadv0 entered promiscuous mode 06:08:10 executing program 0: r0 = io_uring_setup(0xe6d, &(0x7f0000000040)={0x0, 0x0, 0x9}) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x300}, 0x0) 06:08:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a86) 06:08:10 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000480)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10001, 0x2000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000013c0)=ANY=[@ANYBLOB="04000000000000000400000000000000d300000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/211], @ANYBLOB="000000000000000000d00000000000000010000000000000", @ANYPTR=&(0x7f0000001480)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d88ff1cd36825104398d5500"/4107], @ANYBLOB="000000000000000000f0000000000000b100000000000000", @ANYPTR=&(0x7f0000001200)=ANY=[@ANYBLOB='\x00'/177], @ANYBLOB="00000000000000000000000000000000d100000000000000", @ANYPTR=&(0x7f00000012c0)=ANY=[@ANYBLOB='\x00'/209], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000300)=""/78) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r3, 0x909, 0x0, 0x0, {{}, {}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002bbd70000007410000004c00180000000869620000000000000041e8ed4880c9374322c99200000000000000000000000000000000000000000000000000000000000000000000000000000000b4133adbf1f62a55a7a86fca78c56893da1a9da25dcde400"/120], 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x44001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)=',\x00', r1}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r6, 0x909, 0x0, 0x0, {{}, {}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x84) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000640)=0x1000, 0x750, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000280)='syz0\x00') [ 1419.507095][T16127] device batadv0 left promiscuous mode 06:08:10 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$sock_ifreq(r1, 0x891b, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags=0x27a75ae3c91a8a3a}) [ 1419.611155][T16148] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1420.455976][T16158] tipc: Enabling of bearer <:> rejected, illegal name 06:08:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xdf6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xa00}, 0x0) 06:08:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a87) 06:08:12 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x140e, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) 06:08:12 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) socket$tipc(0x1e, 0x2, 0x0) 06:08:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a88) 06:08:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xddd}, 0x0) [ 1421.599362][T16186] device batadv0 entered promiscuous mode 06:08:12 executing program 4: getpid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x1, 0xee01, 0x0, 0x0, 0x0, 0x14}, 0x0, 0x0, 0xcf7, 0x100, 0x81, 0x6, 0x4, 0x2, 0xbe1, 0x91d}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000100)='system\x19\x1e\x04)\xc3\x9e\b\xb5g\xe1{\x81y\x19\xc3\xd2\x19\xfa\xc42\xc3i\xeb\xb6\x95\x192\x1b\x11.\x96\xaa\x06\xa4\xb2\xe0\x8b\xc4\xa2\x85\xba\xc2\xd4\xea\xbdV\xe1\xa5\x14\nj\xe2\xef\xc5#\xd7\xb1 \xc6r\xb2\xd5dzR\xb2\xe3\x1a\x00\x00\x00\x00\xe2\x86p\xe6$\x80we\xf4n\xe4\xb1|N\xac\xc4F\x01\x00\xb2r\xa4q\xc5 \xa9\xd2\x91\xa49\xa90xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0xe) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x8000, 0x2]}, &(0x7f0000000080)=0x8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1421.769624][T16214] ptrace attach of "/root/syz-executor.4"[16213] was attempted by "/root/syz-executor.4"[16214] 06:08:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xe00}, 0x0) 06:08:12 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='{ppp0--selfvmnet1eth1\x00', 0xfffffffffffffff9) 06:08:12 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x0) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000100)) r2 = gettid() pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000001c0)={r4, 0xc}) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 06:08:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe0030000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xf00}, 0x0) 06:08:13 executing program 0: r0 = io_uring_setup(0xe47, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x6a}) r1 = socket(0x6000000000010, 0x800, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = fcntl$dupfd(r1, 0x5dc48433bbfde91, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000140)=""/245) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:13 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40000, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000280)={r3, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={r3, 0x10}) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:08:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a89) 06:08:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x3f00}, 0x0) 06:08:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x1d000) [ 1422.369279][T16254] device batadv0 entered promiscuous mode 06:08:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x6000}, 0x0) [ 1422.429152][T16254] device batadv0 left promiscuous mode [ 1422.452211][T16265] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xdd0d}, 0x0) 06:08:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xf000}, 0x0) 06:08:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe06a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1422.870536][T16281] device batadv0 entered promiscuous mode [ 1422.939536][T16281] device batadv0 left promiscuous mode [ 1423.249850][T16281] device batadv0 entered promiscuous mode [ 1423.310122][T16281] device batadv0 left promiscuous mode 06:08:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xf0ffff}, 0x0) 06:08:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x20000) 06:08:16 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xd664e3f90a48460a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000002c0)={{0x1, 0x0, @identifier="a5c6b4e100a8b120b0aa8be6a61057f2"}}) socketpair(0x11, 0x6, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r2 = io_uring_setup(0x65, &(0x7f0000000040)) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x6, 0x6, 0x700, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x44040) io_uring_enter(r2, 0x0, 0x0, 0x1, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x40081, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_STATUS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0xc4) 06:08:16 executing program 5: r0 = io_uring_setup(0x40000065, &(0x7f0000000040)={0x0, 0x0, 0xc}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$capi20_data(r1, &(0x7f0000000100)={{0x10, 0x7546, 0x83, 0x83, 0x398f, 0x6}, 0xa9, "96eab68a58d23da9b09781f2177f7ec05ece57c184164541d11926eb05a9936e8eba9626b3165bc02d30710e6bf5a9f15621fe5e0ab59e5fc1e874478b8b737726cd4f1dc9cbfc2f0422b839da92d8850f6384c468d2b3a8dfae04e6001a80ef6f7b9205ec5b77526e4a635364d66e5c31309878afc500a960e36ef5c319f7dc48dff3cd6e486df193e4c80246c430333ca4d2779aab22e3452a4c3fb5c0271652c6a217c3bcc60dbf"}, 0xbb) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:08:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe16a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:16 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) r2 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r3 = geteuid() fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="0200e2257870000000080008", @ANYRES32=0x0, @ANYBLOB="0031b70839a819ba99cce6c3", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x0, 0x9, {r0}, {r3}, 0xafa8, 0x4}) ptrace$pokeuser(0x6, r4, 0x2, 0xfffffffffffff2e5) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000040)=0x2) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1425.097374][T16302] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x1000000}, 0x0) [ 1425.149217][T16305] device batadv0 entered promiscuous mode 06:08:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x2000000}, 0x0) 06:08:16 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_UNALIGN(0x6, 0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x6, 0x9, 0x7, 0x4, 0x86b, 0xfffffffe}) r1 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x9}) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1425.224924][T16305] device batadv0 left promiscuous mode 06:08:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x3000000}, 0x0) 06:08:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x4000000}, 0x0) 06:08:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xa000000}, 0x0) 06:08:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x2e774) 06:08:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xe000000}, 0x0) [ 1425.609149][T16305] device batadv0 entered promiscuous mode [ 1425.643508][T16346] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1425.668802][T16305] device batadv0 left promiscuous mode 06:08:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xf000000}, 0x0) 06:08:16 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@ipv4={[], [], @broadcast}, @empty, @dev={0xfe, 0x80, [], 0x35}, 0x7, 0x7fff, 0x7, 0x400, 0x0, 0x18000a0, r6}) splice(r1, 0x0, r0, 0x0, 0x8, 0xd) write$dsp(r1, &(0x7f0000000100)="cd257c4dbf2f7ebad9e3962f056f584856885f6fdf6aa2f19490e388f670d95f77bc976d6cc375608cd2324ee59c6808c74d48889d22bee48ecbeddf0fc369d9fa65cc22094cb62dc93a59e91005b53edc56f46465a40a57fa487ae7f5ef56eace707cde6012c7", 0x67) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:08:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe26a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1426.045951][T16362] device batadv0 entered promiscuous mode [ 1426.101403][T16362] device batadv0 left promiscuous mode [ 1426.249061][T16364] device batadv0 entered promiscuous mode [ 1426.299081][T16364] device batadv0 left promiscuous mode [ 1426.439555][T16362] device batadv0 entered promiscuous mode [ 1426.488865][T16362] device batadv0 left promiscuous mode [ 1426.888909][T16364] device batadv0 entered promiscuous mode [ 1426.946202][T16364] device batadv0 left promiscuous mode 06:08:19 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000003600)=[{&(0x7f0000000100)="c2f19da549033f58f1b220b46603b59a5561161dc66afe8a42029579fbb3ec2b0895f36a5ccb33fb8d26385d566c550ebb0d6be9bf401eb8c16888519f6de810681c6e36c19a6b1f8f73804deb235a674c1b8b8c4d4f1e0b055016c0c9d13f7868100befece66d532383c42299c6de99b0e162282c926b17157176ac82939a7a8e9d49129623f87b2f5b895c6f3ebbe82547a70495542411ef2da345ed3376c3351667f83fcd6d96c103d47584529db7bd479eef1c9c8aacaf8c4711787edb1cdf97e5cc01592de069efdd66c5f23fdadbc8", 0xd2}, {&(0x7f0000000000)="40aaf0bc9bcf0399caf7ef3fb54974c6449d48443929573830ab754a7a3369036e2597f61f3ad65a14a11c7527aed8068ee7c913c37378ce69a2971bb1265accc866eafdfb870f8919a99eb52850a10e5d90a29302d8f0e5a235c117e4519de0c75269c4162cb827f5e0a90aa40919bf283db6f7342f2d8e0a151e85830a5f7eaa0c66af5931d0a4867f80ca4d3d3add97310f780f53957810dd69ded4e95ca5d2104f2a5680701d6a60", 0xaa}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="4db734c60d307ce1e0280db9257ace3223e77fd27bd47597a8623caf001e163347eb5889532d1c56c2f9283df2f7970d09f3b3e7d435589a9cd24ef0fb13ee7c48cd8488a1682f91fadb285f64abae13f9cd2dad150235d727bb250e92a9f98f9287e8bd04a4f83ca4cf8ec1942b0bcc4ccbbf2cfa9500278e52822ea4d3c9045b833660475f4644e84d1e5234c6edb33caa5378f2bc82ab25fa0c6ac18318a05c62799da7b0cdf5e491f1f5233ebdd8293b983757109392dc21862252676c1526f70375215e8c38c21289c5c840cf30f4ebf9b6019f9d42be0fa7834fd72e730837e6b485125bc9e2eff76c47538321ae717e49", 0xf4}, {&(0x7f0000001300)="a1232e4be1a8e7178581081e56d205ca5ce8d5f55bfa5d955647a73630b72ea392c66f6f8181125ac97f3209e0385dccd07798c3ed8d5a91ae7c62e78eaeaa57da3e43c4504b921e62c87494537d6f503d58c503f5e62d13399f1cf17b081199d61a00ac928c7acb3d1a79e631d4d16bdc36557ff5199ccffe18207cd2bf2dd27ac70c", 0x83}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="f796d6db5c23e022ce2444c8cbdf0e66c748b158876fd953e74ac7e991981b3b089c0e21f0109286f3c491a759df1b8998550e0687", 0x35}, {&(0x7f0000002480)="7af9fcaeedfd99bb5bb7bc20a01fb7413d7feba71499b3ff123e423f39b8c4040ff76c1085e2e7bab1e36ff3be0cda33ba06c5411b4d5fdcf32b9d8429b2402a23f66cf6e45367ed3200b13dbc458b3c7b038d1f55600bd74bb5259fbe8d68fc9f59b8648962b7441edfac67050f26cf8527680a2514dffcc9d2ad583c43149f50e017571f142ae5eae53c5b535b3a73ea53e18c7e1e3c9844a9cc28faea474b8ce0739fa8a93f7b64a16bd79d0c52c0c0a4bb25197d6fa0cba4046b32b648eb57e19537f5e2731a8bf704d8aefc6bae75eb5918929ef6b8a759d717cf3ca837137594f434d8668de26cba8ef5479e79643b8dab19e824359235a6594c992d0b3b9d6a706e74359bb43b54dd470e5621efb132c991d601a50008ad514dce6b22dd98222d447d0e026f1424686d4ca63981f233a765f6897ab1f2a92f77960607785166835443e591d60e2f23c1b8844b0010085cbb912a520cde3a09603b8f88a08ce75b730d901f96bde496b8c2336bcad6a68e4eb1b407f6739eaac26bb961212a6724eb41350e62de4f5c06686bc6a0e740b8cc2e8dd4285868a64928cca01f3b8bf2c9c01c936d40227e16e284398189ca59bc102f416e84bb27758cea2719e596b24b18570bf2c7af102cbf240242985ed0277086ca65ef6d262144c5497de6dced042af80f31268f94c722f720fb97c02acc9ba5c5f9914112b209bb9acb3c4cccc1f4a030cac31876dd035c5109d4b3800a328e2456b55e207eafa88b1885870d26b5b62473254d761d2cddd2ea264a7ab5b35761eab9dc0ef90667e1421d0155987588106d7584518856b28f9fcd606d0b54481bcabb80e2cd989bff44fcbef55a544c8609c9ffda29177dcc088b34fbf4270ca25dd8fd1d4f7dc7436337e62b70366c66eb65675db79d9f7368e66c82714a1d283a0063780f47928ebc0dde250b331bbfd5d99625ecd56548a4ad5be052d597674892dfe10c7fdf23933aee54bc73554e211aebc0369c5b6f4e81f0bcc62a1420dea01feb54405f75e25aef7ee4525570afa14bc1815bb7b09c5e725b0b41c33cb9fe4e897f0e6e84016e3769d40c170a666568de1e04ca7b3e8761654a30956cd5cf2e4a2d26efb3329e0ca8637d4d1a1c5b8e0c1ce95e1e77729d19ac1c6d5e7d4b3c1db3c564f1477f1a7e531b413acda447d1559880cc1dcfc91a3ebdaa1a4514cfd0eab561ee2d0a3ecfe141effd561e98c8f023ba8ab076c650cb5bf94d8fb71b4da9953a5a642ab8797903297bb782416b69f6b7483596df4b21fab01e589594def3bda417c5ce6ac0c657dbf436692324319392929fc56a9ab63686289e0fe3f7607b5d05d58b08cfede3f52e252d2998a340ebaaf939c83c06707b4bc1bfc4ae2cf0fd7c9ab6a5dbfdfc3977fe2dfd2654bf06ff5d2312bbac72277dc9184895e94efcd7eb28503c1c28d4307cdb7d656c0347ef0dccc8f37a044d858f228dde6b092ce361d539ad7ea13c873384df5b0a5128324b916e3418e948b20a8981af51e133db04545fa244a42c9f840de0033faae6608908aae719f8e03bcb0fb6fadb11324b086a9c8b0edeee75dd5d8aacd446066bc2e08a4801706546b2b53e167899afd2103784ec05827f6d73dc2e387a86672580aea46e2dd064143493903a71d1d7f96636ec78c1aa0a1e93dde71d34a54d43e4253c76150e72a6afb74cf1bdcc93d68f5ebbc4ee03bc90f29eea0c0fde4865900a87fdf6fa855207234a79156b834ee1e065387272d667b1291c7c4bcb646663063917251a25737762a60c6ee74ec30c3c491defc832fc575f3d346a4e97a0844709a311b3901dc35cbc89e54b27da29fc208467cf536ea07be3c47bc6797b64519100d892c21a285370339b69c70b8c3a0f53866e5af854554a030b0991d03976af6ae307e1e59dd3975f12ad2ee8cfc0717ff3310247a034eed5ffa58c71d26ad0e6bca44ac3440ca8b7d3c4fa3909cf88eec54e8b81a140c25a00d6b82644ae51300972e1fdb9aff9e1fede78afa59b2df8896e0a32b87c65e6d2f19df5c92f512a366cc54f3263aed1d296937a4d23f51eb7040bc9c447803c147756444d55ae8720e8514b470deb94a14a38ad8f4883000020753cd5488eb46fcdb3b8e5c12c863223902ffd46071039efe22935cdc7ff6e010e5bdd9b86d7a00079ed8876d6005475f1d00c3a569eb0c7536c2b8c16f78606e1b64aedf460cad0f62013f23826f4e21a152d65290fb4784313310a2d8efc110ac148257ac5f3a268242e9ef6bcc6adec23109dea345107e07df88ab3cb93b8375ec01b380363599d3cb497b3ec8441b691692e1359df2b88ed460c174e87f82b7e482467b209fbf645cb7804a1d80d01950b23f0133c33b1bc7aa45095d53512660a99b3398be43e01b74f8346f06aaad6416f7740f7053da55f65bb600924e1a3adbd0f8318d901565ad86bf68e1c4bbe7e035ef8d6c34a677cd142b409a055c4287546651b086fb95c34b6b0d16534aad06582008547c619efd13aed313d41240ce4633cb68733c74f7144dc0de1a7bd13298c44a334d7094b433ac4031005e36ef747657cf92de377b38a0df10c59e9d995660acb4d1fd801782aab99ca49cb3e4ae174da18dfa7196a2153a821858123ee32e8ac4165746177bce684f8aa43824dd25583e8a765c4012ec47f23d6fabb7da51d4f8a33c738d51b1abbd7af570c4cf28e2058a6ed3fd70cefe14a1354d1b957031bd1068380dbcc8b10320556eb5626fb1dce03ea332a0e349db71bb039a2f9c5e7bacd0ec229cf7778f3b24b0a304576e684761010304c770453e826af5675e34713130b26e3c731451a9eecff405d5ece8eea8f15ce014c27eb9d0e742256444393b81455892c401fdb97ed27364c55f1233d904941fc705af68d7487bbb536d2490181ea448ffbe119ab6c059466a1bcfa78245efaca5bac555c4df1598be8afb5a6bd2cfab48a2d67492f31684ad6d77f0605992dff5dcf2afa4611455a1a64bd421475e1698f54b77d621da9c6d2e9262eedeb3777105c75c8b77ed8ec831dd655d3f2dbf9b4cb61da20e7afde6fee45ab47b971fb0ffdd6ecddbc365ca607636bd7f76c660901eb0b5b7a4c7f4aa584f6352177979339fc5516f3d68a7703fd4cfc75e6f6a2edd416dbcb72a55c1f84f781a5751553b82f851b791d8924a16e71bc1c277fd47030d2314a17087fde3d59de842a859f3e47afaa10ef549a927f4b65346564d7823951a8a8285be22882946f64d9d01dabcab2d95c9e76435a2fc89df604a105943b993a31973ece10d4a05b5a563b1e182cd7296f638c3d650761f5f5a1aed4fb021985c337bea6f11f6f02f1e3ab85ef62111a95b468d01e9e99f6d7d31a309a104f072a758211a197859185b9be7771fc75918caaee6907c02f7a3026fc7b21615937aec53e687c4abacc877ce8eac1254ab3b64eb9a9bd0d1dacc0e41d95da47a12a289daa37bfe60b854219bf0f2b876d2e4aac342b8b0bf957addd5d1c8be340d764c62b0d60aa6311fea3ab76c6c3cfd1597090f5e7534c2f56c090d12b688692686baca97c485bb1942917601e8384a3eaa21b2451e5c0dab951b695d2449e9a0036eb7169956a7e90429a018f9de98b4aa1ee439df6905699345048115d15bc09a1145cc7d03fd9cd427ca6597c624990a77a85e223dfc73f21878138b619d76acdc15bcb509676c3f7edd5bf99118ea71a7b0239a934c48c1e23cb61874f3950e1095af35b2fe237d34474272784d7c2e0ab545aa31970d615b49f901c697a25f24baa647fe58e75fb81a8d07daf4a9039aeee1d2208e7c73b0615510a547b1c00259129c412b7d9bf41ecbfd58eb37083b80ff401fa8067aba814c6a9e98bd8107f1e51baf8e48f24eeba91549abeb0504948e4b57e55ecf75877d7a0e4b78037e07f3a929a05a152d08ea7174642c8c412b30de81f531efa33194c29dffef06aedc0a8471ae25151e4ef91275b92708aaeee6fb692e06587e588d6a579b5fef0fe0dc8947736ccae87097797788eda92c5b6cb398d5c014c16ecd62badad61992659c33b0263f2c4c1c6c9e86129c7bf6854db17b5cadc27cf6f0f1141b9b603fca485ce19989e5c3cce951360acd7c7246489bcf925e7d9d9d8b0c062b66e01afbb28fbff73c61233cccc6846d8deb22fb1b1c675db2f23cf7cabea0372814fdf9f0d8d25faca73c1f6786324e92f84d0442fc2bae98bf4f0dbfc0fdcb928f29459a77a93803925221a113c3b7635c67a86df8134290a8ba00f1cea8b4984efb8c5939f8205d2d4e1199c22539a063ae19d8d583f5aeabee7abd549426edf73fbd199196e626cde095fa0b95729ab249579cca29fc7c0af6d6fd2d1ffbf589c980e99d2c7908310fdab4ba676d2268fe5e56014c4cef65d7fb371fd2ae1fa863c42fe27eb228619ad35705bcf984f7cbd783e8415bcb4a859930b67836160b231d1e94596460d77285e0cf89d8c5aa4469a9a1525b2cceea44d2cabd0694dec23ec34c995c668647f3255130af25ee98691df08c23e944e946c83e63fb0a6a00dfb01483d38d31df98f15bc78aa8cfd5219494152b118ee3e227dc89c75ca39dec3a05ea5f2bdcf69170281e69f9ad447effdc0ea6a96eec4b3367bb760688070de06c40faa248b34718dcb351c8232ddd6e89b864941d8ea3324f19e709a2ccb0b61a010191a2baaa78063fcb3f19783f0d39499d50d15f3d0088a4430392a43e734c4862eecae69ffc36d90b00fa1e57dc41828b387dc88d54b2f5df70a060e2077fb1a6520c7eb27cbb73ff2a60c3a4a2a1e7a091db932f95e505abf023d3c66bf5966670d9997ebbb66f9f4ec0ea1a0877c26fbcdf3ffff0486ad9b7c59b20e2e124bf26154f71be5a439aafc13a2ef26c22596137f51555d03c06b8c85434acde16cb40255145d55e41006700ef4e812b6131a5fa28c08a057752fae89a1d7e762daf00d54bdd435dd74743cef9d687f99848ccb96a71ad8643854a0499070eafc33b07ccabb911b7c549512983222a57b9f3ecdf408df5c903eb76c62d2ea630d9551bc02cf639649dacef46b70fbcd1c8a9b0d0a06a7b65d1c25a685f12a6a6715d3fa302f050c440079f6b3b1226869ee90b98cbe85ea4fb7159fc767791c461dfa8869f524f89fca6431eca49b78b65604230872c1700d251f66a1ded3639880e7e82619d3b3b67905e398b608085e2027167b086abdba255190851d3a734f0ca90ccb9e4ba57a58d32a613e1323f2e0424fe10769180f8634313955a11611e5acafc0b4c1b12c9c10e74afd81cee29d215d5ce91fc5d84670b9a1e0de2ea8fd2192880199013ee3d0d4f5233bed0d15a6deb1a2e97f0647c26060dcd2321460ecf14ac9fd2de257973e27db6f78ad3bc8fe11363e775b2dfa361f93336ae2b3725bc7831e9bd43bcab4be7b1b2bb5beae40fb254c2b33bea507d32e1059720e476a772209299cfcb6faee75eeea55d1abc1bfe46580c3a469fa6792b7e67813131cedfe4b511f6b39477c9e4f15a38f5fd3729c1a15960f6590fdf7063b88d0702fceaff3256dc117b7e992b267fd6e8efcdbf7215ef7e6b3302780eacd8f8d0dd5807accd74d6b34f37602e1539c03948594a1e97b037263da3982b60e3d5801093b08d22058012c406b8480bf911b0266e1ba13110bec9e4d24b0bcdb3549abbaf447a485becd327f5b42685a54a4ca149187051faeda60298604524d38ff77fbd6cd878eb9b144d5034f039557ab74", 0x1000}, {&(0x7f0000003480)="2600ed4de31c8171a951e4623d1e136f8c2387629d092a08a6ea7efd1315e8cf24751104ea545695637e05a6cc03fdcf5b2aa0a8fb95a43caeaadeffdade1291fa6e61f19c008a5e5feb1e064e757c5000e2d459b7012d8a373286b6e00824cc5adc8fd7d79c1a67025cabf44c61a2d63364f06404d001f8c423c524dd7b367566504193689da814fd197cd068bf2ce003665f71dd67e149e853bc1f469a9306", 0xa0}, {&(0x7f0000003540)="630afc5aef1e2871968bfd7bb999894567a44f7fd4fb6d64427b097cfd78e0467868ce1f3fe819407803287fb56dc98b10d037042db91bfc5c6026c25e045faa105eb79c95b6b767feb096b3dd2d80788205c2689927452e7b4f58033fe69614ede27e2ba466147a045a35200351539cfd352d19033f8bef06bf9a073234656af81c3fe909364ee79f8f9c1682d1", 0x8e}], 0xa, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x3f000000}, 0x0) 06:08:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x600000) 06:08:19 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0xe) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0xa20000, 0x8, 0x6, r2, 0x0, &(0x7f0000000000)={0x9909d3, 0xffff, [], @ptr=0x3}}) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/8, &(0x7f0000000140)=0x8) r4 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r4, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe36a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:19 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x17c, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3687}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa0000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa9d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xafe8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) [ 1428.217033][T16407] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:19 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x6) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)="e7299be4433030740ac9") r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='timerslack_ns\x00') ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x60000000}, 0x0) [ 1428.268897][T16400] device batadv0 entered promiscuous mode [ 1428.356008][T16400] device batadv0 left promiscuous mode 06:08:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x9effffff}, 0x0) 06:08:19 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000027ffff8008000100687372001c00028008000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0500030000000000"], 0x48}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) ptrace$cont(0x7, r2, 0x0, 0x0) move_pages(r2, 0x5, &(0x7f0000000000)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0xc) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x3) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:19 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0xd) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xdd0d0000}, 0x0) 06:08:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xf0ffffff}, 0x0) 06:08:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xd00100) 06:08:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe46a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xf5ffffff}, 0x0) [ 1429.071284][T16459] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1429.109364][T16458] device batadv0 entered promiscuous mode 06:08:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xfcffffff}, 0x0) 06:08:20 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) [ 1429.182174][T16458] device batadv0 left promiscuous mode 06:08:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xfffff000}, 0x0) 06:08:20 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800400000004674053801c5d6dce61098b8886656d562a58b2f0c081171152a495aa760fbbd1b508d2d850209e06690c5a02695693c45942168762dd3b4998e11af2ffd5eb4b897d57050e2a45779ddf5b85949d6d62611e6712e7b074112a8521d20966f2f1e42fc4be1e520eadcd4d1c961082792d511", @ANYRES32=0x0, @ANYBLOB="00000000001009410800128008000100687372001c00028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="0500030000000000"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', r4}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040090}, 0x48000) r6 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) 06:08:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xffffff7f}, 0x0) 06:08:20 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479ae8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb7a8a01dc82b4462f823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c452497499f049334fba3fe169439ffd339708a8db36eff87d32003408000040000000001c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e100"/197, 0xc5}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0xe) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{0x7, 0x3b02, 0x1ff, 0x1}, 'syz1\x00', 0x21}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xffffff9e}, 0x0) 06:08:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe4ffffff, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xf0ffff) 06:08:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xfffffff0}, 0x0) 06:08:20 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0xe) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1429.838431][T16498] device batadv0 entered promiscuous mode 06:08:20 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000000)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1429.878575][T16498] device batadv0 left promiscuous mode 06:08:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x1000000) [ 1430.021423][T16516] ptrace attach of "/root/syz-executor.4"[16512] was attempted by "/root/syz-executor.4"[16516] [ 1430.076288][T16523] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xfffffff5}, 0x0) 06:08:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xfffffffc}, 0x0) 06:08:21 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='tunl0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0xe) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x1}) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) 06:08:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 06:08:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x100000000000000}, 0x0) 06:08:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe56a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x2000000) [ 1430.679051][T16546] device batadv0 entered promiscuous mode 06:08:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x200000000000000}, 0x0) 06:08:21 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x2, 0x3f, 0x2, &(0x7f00000000c0), 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r6 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x492492492492778, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)="24d3bb63d44059c5cd2b763bc39640b2720172078c8af46cee315e5bdb0789df0004b069792a2e2b5077790301f18e93846c26088f35355cf9bd1444df380f36292500bcab3e266304000d0e372d7e9026dc69b677fbac84a19f55", 0x5b, r2}, 0x68) [ 1430.726084][T16550] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1430.767440][T16546] device batadv0 left promiscuous mode 06:08:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x300000000000000}, 0x0) 06:08:21 executing program 0: r0 = semget(0x3, 0x2, 0x620) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000380)=""/4096) semctl$SETVAL(r0, 0x3, 0x10, &(0x7f0000000000)=0x29) r1 = io_uring_setup(0x60e, &(0x7f00000000c0)={0x0, 0x0, 0xc, 0x1}) io_uring_enter(r1, 0x7, 0x0, 0x1, 0x0, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) wait4(r3, &(0x7f0000000080), 0x8, &(0x7f0000000140)) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000200)=0x3) 06:08:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x400000000000000}, 0x0) 06:08:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xa00000000000000}, 0x0) 06:08:22 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000180)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80402, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000100)={0x5, 0x10000, "5223be0665a761fe89e7a24f84210d382e6470b1e815016a", {0x2a, 0x8e}, 0x80}) 06:08:24 executing program 4: getpid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008041) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x22, 0x0, @thr={&(0x7f0000000100)="84d32cf808d1736b16620746282f693772ca2b754af70709630a87df303ae3679202ca415428d7a53d84d0a9708621c1305114cf512073e130b797f9938bd4eb2ee1cd3e128fa2ca695b54a79ca742f35e4738218f439f3ec59742cd5596503d20baa35161c7ed75c5f4e760b24efda17a21f65dadc56cbce6c108e3e9280758e36290708116ff5574888354089cd9c7bdfb1bde5bd078a315f59094b62da90717f849bee94ff07ce96083e97d38d081d2b394589b3f77cc86f10a19d2460005d6da9930a03b", &(0x7f0000000080)="a18c8b7a30262bffa1289849bb5b7127c28510281c25598dd9bf860e2848399285b70144ef"}}, &(0x7f0000000240)) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:08:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe6010000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xe00000000000000}, 0x0) 06:08:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x3000000) 06:08:24 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/130) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:24 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x4080) r2 = dup2(0xffffffffffffffff, r1) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000140)={0x9a0000, 0x3, 0x7, r2, 0x0, &(0x7f0000000100)={0x9909da, 0x7ff, [], @value64=0x2}}) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000180), 0x4) io_uring_enter(r0, 0x0, 0x8001, 0x1, &(0x7f00000000c0), 0x8) 06:08:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 1433.441100][T16607] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1433.458493][T16602] device batadv0 entered promiscuous mode [ 1433.480045][T16616] ptrace attach of "/root/syz-executor.4"[16613] was attempted by "/root/syz-executor.4"[16616] 06:08:24 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x40000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$cont(0x1f, 0x0, 0xd4, 0xfffffffffffff20c) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) tkill(r2, 0x4) [ 1433.552131][T16602] device batadv0 left promiscuous mode 06:08:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x3f00000000000000}, 0x0) [ 1433.628407][T16630] IPVS: ftp: loaded support on port[0] = 21 06:08:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x6000000000000000}, 0x0) 06:08:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 06:08:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xdd0d000000000000}, 0x0) 06:08:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe66a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1433.899815][T16607] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 06:08:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xf5ffffff00000000}, 0x0) [ 1434.228436][T16649] device batadv0 entered promiscuous mode [ 1434.298948][T16649] device batadv0 left promiscuous mode 06:08:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x4000000) 06:08:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xfcffffff00000000}, 0x0) 06:08:25 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@mcast1}) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80000001, @loopback, 0x10000}}}}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa9db}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1000) r5 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x803, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4f7475006331a8a6}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:08:25 executing program 0: r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r2, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x3}, {0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48080}, 0x40040) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000100)=0x6, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x492492492492778, 0x0) r6 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x492492492492778, 0x0) splice(r6, 0x0, r4, 0x0, 0x10005, 0xd) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) r7 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r7, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1434.579396][T16675] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe76a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 06:08:27 executing program 0: r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000002c0), 0x4) r1 = io_uring_setup(0x65, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}, 0x1082c, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r3, &(0x7f00000000c0)=""/26, 0x1a) getdents(r3, &(0x7f0000000080)=""/33, 0x21) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='rose0\x00', 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) r4 = request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)=')md5sumcgroup\x00', 0xfffffffffffffff8) add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="d53ecb425bab3d538df703bd3f38ea68ac3558bbc8409816365b44a62a3cee1a9856677556b3933438479870b58b5b665180db386258ab7995a857b99878d31da4cba3d9d4f5717d7c78a0cb746d40d82533ab14e9436b43596983f8dc7b3f90d6781c055f11d5597df8d6b78cb5b7bb5432e9ec2dda58e1128c9ff6ef1772e3be3b8e3de3d917cf24c319002222db544cca661ba71e1e27114de7e480006a273978398e203ed7830353b5301ab830bc6bdac39c23b9dc0b3fa5c900d1cb4b9a46e497e19923ec717889972645b7e3cc320450313730e7eed4c3adae0b77", 0xde, r4) 06:08:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x5000000) 06:08:27 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x13, 0x15d}) io_uring_enter(r0, 0x6, 0x10001, 0x2, &(0x7f00000000c0)={[0x2]}, 0x8) 06:08:27 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4, 0x8, 0x2, 0x2, 0x1e}}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r4, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x44804}, 0xc050) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "8d3359850ac56024", "f859510fbef444f511ab0c20caea170f", "9c977808", "55fa0933ff19cb39"}, 0x28) [ 1436.603683][T16707] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1436.638282][T16702] device batadv0 entered promiscuous mode 06:08:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 06:08:27 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x140000000, 0x4a8440) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xe8, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x99}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x69}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x90}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9e}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000327bd7000ffdbdf250a0048ffcba3d584fc6e69474500003000028014000100c344bd2d324395ac1b955e22826824e806080008000800000008000500c497d77d750005009e0000000800040000ffffff488f04251c41f561e4fed63b29985ff24e40f6150805668cc92de369f3a09429f0026e634bdd01d993590348b62b0527bd859a918932f4a4204747e3345c318dafe8d09758dc674ef42fca27386de0d6aba3cd4be47cd7ffd0844054d076de6e9e6829fd45"], 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x880) [ 1436.697545][T16702] device batadv0 left promiscuous mode 06:08:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 06:08:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:08:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x0) 06:08:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 1437.228136][T16702] device batadv0 entered promiscuous mode [ 1437.287418][T16702] device batadv0 left promiscuous mode [ 1437.403384][T16707] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe8010000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:28 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e20, @broadcast}}}, 0x88) 06:08:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 06:08:28 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000040)={&(0x7f0000000000)=""/50, 0x32}) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xf, r1, 0x3, &(0x7f0000000100)="96b512715c856eec660d0a3b5d3d40da5fc50951b91ddf55c2e0b649e2afbb536cb031453ff381c19436f83ae0414a29c0e320666d50c53601daef91d38f514a8fc19239d8ab5b3b30") ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x6000000) 06:08:28 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x7, 0x9, r3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1437.684594][T16771] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 1437.778394][T16776] device batadv0 entered promiscuous mode 06:08:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x54866380, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) tkill(r2, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x4, &(0x7f0000000100)="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") ptrace$cont(0x20, r0, 0x0, 0x0) [ 1437.844147][T16776] device batadv0 left promiscuous mode 06:08:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xe}, 0x0) 06:08:28 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$midi(r1, &(0x7f00000000c0)="2fc2fbeae6253689cef0bd6dfe8049814d8620f0e20b84a4e135bbcacc8d80f9bfb837c4730196939caf425a1371d4c3b439928c82898d50ba064657c9321b5509a091c116e114911f0b284c28bedfb17dbfd7e96349e7fea3575588197ca174e71f175bb26d2661b6d54a16eba7c06322c9811d5d1fb24ea942abe83a", 0x7d) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:28 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x52000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7fffffff) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000440)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00583da86f6914f7630000", @ANYRES16=r4, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x41}, 0x20000804) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100029bd7000fedbdf2503000000080000006a453b34c9f09ff7209a9cd5000008000100"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40010) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) io_uring_enter(r0, 0x3ff, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:08:29 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) getrandom(&(0x7f0000000080)=""/36, 0x24, 0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x1, 0x7, 0x2beff02f, 0x3, 0x3, 0x7}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe86a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xf}, 0x0) 06:08:29 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:29 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r3 = geteuid() fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="020000000100000000080000", @ANYRES32=0x0, @ANYBLOB="00002200795086574bf2fbc3", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="10000200000000080800000000000000bf6ba308525fb82df4d1ae00a29f40e06b000000000000000000000000000000cb967802a35d8cf51cd8a6b0caae714e399af327eca12c7599101fc161142ffa1be75d3d9fa4e4fe36e2648cd3bcc59a1b37cd350944aa459f1d304fa8b17722736a44510363745431f26bc2e31a60a275bc6211731f0361878aa0c2930a0e00920006e9fdb4eae261d4c02c1fe9c5659f5d672bf342eacd48f6806b463b3a9408364452a4fa9bd178b4e2f2b734cb2a8c260efb90130bc6afd43aeee4e5410c904bfaeebd4782454044c095cad8923b86826207dfecad1c2530c84da1c9dc457ed82cbc622bbe9273159cef38d50001000097d7b4f6b463bf6a0eadd053bd82a4cf6c8ba5536c23c99bd67a59f429027cdaaf18a497760080f7241c3040b51458adb47b2c786d3fe8d48315d12079bd4b28d6ecb69b0dfdc3c6c4fe56db1cd32fcd0004ac13394f9e8a71905f5dfb08b69f24225ee86859e1c48fdd8c4439c3f5f6c270d31102feb71a9767c3de68861b96b58a608d21719f1b789f0f1fba2fb4f9240779306ed9310459ffd4c371b7527c0b8b7ed9adaffd1f957a6ed65564e58cc382d03569cfd7488164ce09ce5dc8f442290e8ef6151dfa7d367e3688d020a8b64658a1599d203795be8979ecee265946763d878c2ebcdac5b9"], 0x7, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)=[{&(0x7f00000004c0)={0x16e8, 0x22, 0x800, 0x70bd26, 0x25dfdbff, "", [@nested={0x12f2, 0x8a, 0x0, 0x1, [@typed={0x8, 0x27, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}, @typed={0x8, 0x1f, 0x0, 0x0, @uid}, @generic="650c927ad7ee98a4f99070c0c4eed30ba4ed8b619aa1b2eec76c4a70cc5834e9fcda83104f23c49ac8b4a74a176e3ade99f11a3b35c75a00fe5eeaccb7d2d787475b2f81580e860e08eee7ee25fcab472d702c698040391c96d640b1b9f578f325b1a3a936345973930d4f124de959d4ab3de26e76f1cc2b76c65c78121716885111c0b6be749e35efdbc07c02d4b673c7035334ccd76b7fb1b05129d89b9e3532fff4bb6b670f04f9f50edaea049963f9eace56200ddefd02a3ec02e56962d8058e9c56152f8237c62dea66e138e75036c3a384", @generic="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", @generic="80950c40917977e5ff1eaacae34ec07a2737b53ee3a1c3eccbe5a7b27d5723d7a4a7d78d263e0fdb1f4669857818613d9d92b0baa2bcb82b53a93b4a7998d996aa2d7bf92bf83fed0e8b2676408fa97620dbbfe30cbb119ba309731786b446273972726d942b88f3fa813e644ef7720c35623adb58d0927c311e57115b4b7c18b188e6eda9be6406aa24c7fd047c6fb392e47350d477cf3eef8754bc26b0c2cc7203cd1ffe00b739b4d8d1c5c3ef644f19edd2529ecd48eab94d5ccb310ee740093bb2a5dc7a8762e626beb0e60047bcaebac9c6dea750c69c1ab6e3ca4d98", @typed={0x1b, 0x5, 0x0, 0x0, @str=')em1ppp0userloselinuxm\x00'}, @typed={0xc, 0x65, 0x0, 0x0, @u64=0x61}, @generic="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"]}, @generic="10eef16ea7d12ac0b7875557143329bd2a92fc1db627b8a5f676d4bff79de3331c39b1740c6ecee6b618f02d514c74aa02952e75f75de123f6ca17fc0be25a6f38e876463b6ebe5a379a846209207a208a6bc80212ef24f10f7583102195325f2ceb28de9fcc00b9d920b14daac394b064be2ae085658a92c49ca227f5ffa77e3ca78000f81c8a04f133adc666a00563d469962f966943e06c2bcfb9fd695c413f3a21035d4ab9343f917499d4bd6ed03c62b5601305e4c8aa670bfd7b4c159f84aebb4d0f9d32f9868cc57d894df3ae3628a196ba2d63ed1e6f", @nested={0x235, 0x47, 0x0, 0x1, [@generic, @generic="38c3ae68ac52ac2bbd764e300b534f064a1beb1013b87520044638e6d0430dce512f90793780543a5e86047e17abec221f12057a0d8efc3fd6ab8709f13c2463d3a83895794a58ef52419304b0e21ce8aa5fec8c9ec69f98070044e5c8afb55dd099a2a19ab49a685334dde41f3928b501c1c00a5a1aec9ea0803d18fd5ec03bf2f17dcba061face83ea6bc0a0c10120aad0a637bfda8edc4ff2d35ba10175ff9aad3a1e6672a298c80c49d014f48c8600a059c4cdf3958e89c3f6be65aab7316d53ccc4dd07da344cb77b659e", @typed={0x8, 0x7e, 0x0, 0x0, @pid}, @typed={0xc, 0xb, 0x0, 0x0, @u64=0x80000000}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0xd}}, @typed={0x91, 0x79, 0x0, 0x0, @binary="d66744c275856c47c2a2ce448bf66f5508ad76a65f496a0c83679c7680c18348a96dcb8f34aee41e465b02e29d4ae33eecc3f474f54db60717aa1e8f045dcadd0bfe1678e92d347c38a1aa668218d7030310060b6a73c6971004e131009ec5ab12d0d9360728fe4f942cb96bb6cd0be3d7beb73e992ce11fbc3e465cbfb2a9293a06db8ab5f115817b44a658df"}, @typed={0x8, 0x69, 0x0, 0x0, @pid}, @generic="21d0d898aa858713650ae9d0fb342e79c0e4ac3d4068637270492f860ce3a7a0a20c382f8dd6e5623ff8943af7683c02f5588990851adc9856d27b283b856ed864efc267dd83f57c93daaa38633754615534bc5bf75285fa273b94779233582175449210e7ca3a0d5d06751d42ec657d805c668f98cab43928c0b3d9edb7c0d15000983ceb353a9f", @typed={0xd, 0x93, 0x0, 0x0, @str='.\'louser\x00'}, @typed={0x8, 0x46, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0xba, 0x12, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @pid=r1}, @generic="cc1817e19392b67766a91ef38815820f1fa257b737ec66665bd4e7f7d5c749", @generic="f8ed7142ccd25e6deb9de7a143f8c2d5d0a3a1102a3e84d4dbfd031e5dc31d53f23e7a61ba4bf79f1a69d1e8cd88cfc742fd9342d6fd84151d6d90bcf9176672495124049603347deb0c8c08bb43b748785fdc7499d5b6a0b304ec9bf598b1bf27e510fc8afd1a5caf443f50683dd0891093738287e62fbc86276b10a0441141", @typed={0x4, 0x4f}, @generic="5b33833bdb604b3929e084"]}, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x16e8}, {&(0x7f0000001bc0)={0x394, 0x10, 0x200, 0x70bd26, 0x25dfdbff, "", [@generic="64b7aca805aec2a51b9e14007b471c6750fb6c95a6eb9dd4b2735c5bd71c131138ca43352a291b367d32c4b417298da0bc2d6b52061647db8549af5f8a2867610c4370022757db27184f4f33dd19f39294d1285c0e279a25fd4328479b36615614e54fd0542c503855b27b73c06283fd8a", @generic="21650d007988b98ed92c39c483d28648a126ecfce33e1f5fb63a3eeb0f7821d390007eba8211107f6799153a8596b7906dbdd1b4eaea58", @nested={0xd9, 0x62, 0x0, 0x1, [@generic="800075c9df223172cee55e7b30faeffa0eee58e8f38956b6049cd0a7024574142561cd148eabb137222c9507c8b085cdc48f850d2e6b555fac1ac61892d7dbe08799455a317adaaaaf1e0b20dc670d2d26fe6ee457e5219fa5e6282588fca99debaedb553e2770f6daa967e2c1498a5068c156424e262adb09", @generic="c3806717407e521500fdf3974f387b94f0b1a807fac0551c61215a82b6a6a0ae2b810bfc5d2cf1ffcc2b8f", @generic="b261ea403ea1b9509c63ec473a244be3663487a6878b18b79fb187626a9529ccbd6de3922492a7d9d3d8f5a42cc1cd7dbc"]}, @typed={0x8, 0x2f, 0x0, 0x0, @fd}, @typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@mcast2}, @generic="fd42849320419386649ae5259ce257b40b93e63d6b65eef6fb1e8418effc71584e3aaa97a7e5ea0ae765120c52e7ed6829a46d8b0b272c01fb4a9fa3f3e5c721304c91ecd007f1222c7eea87a7c9d47c3a23aa04ff9a28ded0a9d4beae52609bd53b352a6a359e9b324cc10ef0b1b942bb65cc814600bbfc35730f0f89d6d9cc72aebd3946c68f40056e20e5a7206ae3494dc22c4616b4bfe2ffac72cb593ac45cf75abc66e29c42ada1daf695f1eb09", @generic="02236746dbe44e24940040e6d222463a2f7c41193db2ebd2fd71376b822472a0d274a6e2fd27c0e1db740e24653ab96ecc96304efd0ffa35e346df08cd900a37bc62c79a64a54f418efae65f716091bf06f4a85c9344f48800cf01b2ade2ff0145dca598098f13defbdf7dc76003bfe7448facff53ffccb098eae7d8fb636daf0b463ec84c8ef57603d9736cf5ecbc08d7c5cdda4cd5f00629acd1dfaf92653ac0add325e30f5206cc6d5f7dd38bd3e30d4fa8fe881caef960", @generic="04d3827dc291e53218cc34d7275c1354fc74372956ad5de6808971b16ce0b9741e986b9e9ea62f5daeebde6683d5ca27ca437f8daab385bbf6991e0eb1c3ef7ffcbf292f081b41cf19013547bbc7e8c55b4f041fd4a5b1179c9bbf2b50c1f8ed9a719fff2d9e90a22a88c16eeb1d982a5d65abff00c6beeb395407"]}, 0x394}, {&(0x7f0000000180)={0x130, 0x1c, 0x2, 0x70bd27, 0x25dfdbff, "", [@typed={0x39, 0xf, 0x0, 0x0, @binary="d3d5e210f73cdcff0450a84cf600f12ccc42302c755b86f4e68ebbcf3dca6ac1f6593179082a607d7a1d84cdc00daada6e2c785283"}, @generic="a6911ac45c2ab3535ed4162d1751ca1a8cb981dcf217f95b014059897ef478a2afc514896672104f723e9ef9a7a0c6e85c5508c93f7d1924a87cf01a7ddf412a0e4a7b7ea0e1c3357ed95fe1cb2815a551a7dba56b29586ea697528a2cd6650e4daa4662eeed848d45dc648b9f6eddbc04248a5537f5549a3ebadc0265c243376c802b81c11b8665d460ae4d10aaceb4279bc560482fd946f42ed0a898a9a7160c887c74aa28d745167b7dcd38007af9a73c2b1827d402f6aff875ba287ae951ef8869264cd2be2853aee38fcb15e0bedc99568927700352242934efc7d102c1df"]}, 0x130}, {&(0x7f0000001f80)={0xc8, 0x33, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@generic="122a8f3fede7f95645cdeac805027b561b30a8fcbb685a22a051991b3e6664dcf35cd500994ae89c5df05720762517484db79ffc71919ec65739b1d034506b36ee885f6270c97f10f4e31a9e7a3f673aa9b88802592635d1d152c17630566d0aa5e90541cb7b62dd33a2d36eca7dd235d2fbd3354364803999cec16c7f295dd7b5b8e67f70d2a9373de9a04bc17d9fb8ea7234c3bbe137bfc217af6d9bb95dcce6cd807652dcbc86fe2c7ce03353bff338d38bcbd1"]}, 0xc8}, {&(0x7f0000002080)={0x2f0, 0x14, 0x10, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x52, 0x0, 0x0, @u32=0x9}, @nested={0x156, 0x2c, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @fd}, @generic="dedd0edf204f6e02561f54d1e791f26e929b5586bcbde543205fd0b5aa615704d20339712a8a0788baee89806b393f19b1fdef265ef9875245b75c418bd68d5b69ab479dc89fc60eaa1ab82376e7977de7c8dd2f0cbc67d8f8e1681c3dca5dec2c1f1ab0b2ae33932043badbb7a632aac187e519290f0342590cbae356cc91b92a3ed97fa712ca76225ba4c423071f8c4eefdcaa30117100d8c4334c8648c763b8efa104a2493debbe3d8f944f2115c64c6d2eb8c4efdc9a08afad18b8f5176c4f2159402f59f2e4", @typed={0x2c, 0x7b, 0x0, 0x0, @str='bdev{bdev/eth0posix_acl_access\\trusted_\x00'}, @generic="29893a8d7e7dbe7d771f6b0525ef416e2ecebb9be06e483cd3983ad4a3dd7e225e3f47edce8b49e34b257f3acd7fb8a2fd47fbb85a456fb604e2664d13f3238b0c43118bc72f28403863b77b0057ee37508ff1106e0c"]}, @nested={0x15f, 0x5b, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x34, 0x0, 0x0, @uid=r3}, @generic="13e20559ef9e17c32df63c3008edd2d97c4125aeb6e0efb3557684245f1d76a62833cb76e655960b74ea955d55dfea5840388801d07d377a57cfafb50e26a0348278fce0728641a623d8d3e8d1f0649a4514a2ab90e20ce6c2f743145eaf40642668802cc66fbdd5311619fabb4dd85e01aa9102501bc58b311c100b134c9a4b75e8dc6fed621a10fe87784f176e925cdd509fec8d2735d9ce4fe818f3c2503084b97e", @typed={0xa5, 0x4, 0x0, 0x0, @binary="fb2ad8515e23bbd2d55f3e82fdacc451a85a5dbfbd7f49f6aff219e8de648f07020ff2d1acd68de25e75e133defc3f44df7a8ad06e4c25bdbaf050ef581da46f0c110bdc95d1490f7ddaf1b1afdef68ac7a3ee3e10be51370ac4f5361ef27f1796a02ae32f16ba203ec214c1338a3b5f46e664b9d81cc90c3865b721000ea47cc3fa6166eb1a4e2119ddb0fc9a72fcddd4199b22f1a4c383dd47af88812637fb27"}]}, @typed={0x17, 0x6, 0x0, 0x0, @str='/mime_typevboxnet1\x00'}, @typed={0x8, 0x6f, 0x0, 0x0, @u32}]}, 0x2f0}], 0x5, 0x0, 0x0, 0x20004001}, 0xe8c9e0aaff33a5bd) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000100)={0x4, 0xa6, &(0x7f0000000000)="ba3348112fb47d5f9596f6998f18eaba3c9477e86a3955af1c682d57b3235422b8fe5693c47898f9139fce35df724cb96389ab1cd44483ef232c6d21d9804227739740c4c27bc6370a33958b5f3d2e2cdeed72ed4c39c1c94f0974cfb4bc2a1c1357886562433d61ca72bbe8131f4b291018ecc5f6c475aba9518202521bff4cdbada86d5db6bc01d508144b4e012a2a27b3886a668908ca4c8d7e1de6c279ac8b1cf597dcb9"}) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x7000000) 06:08:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 1438.469528][T16832] device batadv0 entered promiscuous mode 06:08:29 executing program 5: r0 = io_uring_setup(0x202, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2, 0x115}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)="0b0a4cdf142d42e69a22fde71dbb52a79f4d8e8e97e062daf104e5ef5bf9a614438bb748d08fdfc36a90fcdb660f885f66267413c7d910fb9305978dc9688357545130c336de962cbc33dc166c35b074a0708c70b4ba53943963d59abaed2aaa77cd96361b5da2490f05da34ba61ced61f200d09c4cf902ec3874de9078eb9e60c4e82f51e2b0a1a03aa34918ccae153170de3e10ac8e598709d6791495d1703d1910f46a8ce14edcd25e881188956dc006eb10e") ptrace$cont(0x7, r1, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='net/unix\x00') r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "b339aa0e0d1bf7d81060b01bff1fc5a1aa4ab2d4caf8550e9c896fea9b52734b6d31251b3ec6a9887c7b2ad96124df57d5b73f767bf5f1f642d58bf9a35b921f83a16958ec7683319c0dd13db41759c17fb2c565467240fc49966448905100d36e6eee36d47ba25694290f3644de4a9655ed12910d42c7e085884fc77879d7a381bd6cb7893712fe503631e9fde6b9cf3c9341eda8ba15a3fd60c76bb050bbae08b1f70211c94fd50a7124a96eddc2295d28c6c94e8f5ccc2251df0cd2afe352fd20e27e63afd3c6ccfbd0ee3e0027d49ef93d04521ed650a9b61fcee86f694918cab649ca2cc43f2a6390fa19138e9595cf288668380b88e0d4d8c5ba81c818", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r4}}, 0x120) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000001c0)={0x2, 0xf, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @empty, 0x7f}}}, 0x80) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000400)={{0x2, 0x0, 0x7fffffff, 0x18d, '\x00', 0x8}, 0x24, 0x0, 0x4007, 0x0, 0x2, 0x7, 'syz1\x00', &(0x7f0000000680)=['/dev/infiniband/rdma_cm\x00', '/dev/infiniband/rdma\\cm\bc-\x1f0\xe3\xbd;\xc4 st\x842\xe3F!\xf53\x14\xd9\xe2d\x8d\\\xdc\x8cb\r\xe0\x1d\\\xdb`r}H\x9aC/\x92\xe5\x96\xe2\xa1\xf2,\xb1\xc5{.[\xae\x03\xb3<\xecv%E\xef\x17\xff\x8d\x1f^$C\x171\x06\xf3\x94\x1c\x14\xbc\xc6\xf1L\xf8\x1f?\x88q\x12G\xed\xe50x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe96a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x8000000) 06:08:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xddd}, 0x0) [ 1439.169147][T16874] device batadv0 entered promiscuous mode [ 1439.195220][T16879] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:30 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x7, 0xd, 0x6, 0x0, 0x9, "e78c6f23ef202dfdfa6c10b4dac671cc310952"}) [ 1439.241122][T16874] device batadv0 left promiscuous mode [ 1439.617951][T16874] device batadv0 entered promiscuous mode [ 1439.687534][T16874] device batadv0 left promiscuous mode [ 1439.783558][T16879] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:32 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:08:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x9000000) 06:08:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 06:08:32 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) epoll_create(0xffffff13) 06:08:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xea6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1441.548094][T16925] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 1441.597848][T16924] device batadv0 entered promiscuous mode [ 1441.660641][T16924] device batadv0 left promiscuous mode 06:08:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 06:08:32 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0xe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x200000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x3}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000240)='em0\x00', r2}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/sequencer2\x00', r2}, 0x30) ptrace$cont(0x20, r3, 0x6, 0xad4) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2a180, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00', 0x4}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1441.848525][T16946] ptrace attach of "/root/syz-executor.4"[16944] was attempted by "/root/syz-executor.4"[16946] 06:08:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 1442.019118][T16924] device batadv0 entered promiscuous mode 06:08:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xdd0d}, 0x0) [ 1442.089194][T16924] device batadv0 left promiscuous mode 06:08:33 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x0, 0x2, 0x25dfdbfe}, 0x14}}, 0x4800) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20000002) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 1442.199725][T16925] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 06:08:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xa000000) 06:08:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 06:08:33 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80201, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1c3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000810}, 0x14000040) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0xe) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r4 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r4, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:08:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xeb6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 1442.696554][T16985] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) [ 1442.738113][T16984] device batadv0 entered promiscuous mode [ 1442.801186][T16984] device batadv0 left promiscuous mode 06:08:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:08:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 06:08:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) [ 1443.129829][T16984] device batadv0 entered promiscuous mode [ 1443.197272][T16984] device batadv0 left promiscuous mode [ 1443.304909][T16985] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:36 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0xe) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x1) 06:08:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 06:08:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xec000000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xb000000) 06:08:36 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000000)={0x400}) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:36 executing program 5: io_uring_setup(0x65, &(0x7f0000000040)) 06:08:36 executing program 4: r0 = getpid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)) eventfd(0x4) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 1445.258387][T17040] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) [ 1445.299317][T17034] device batadv0 entered promiscuous mode [ 1445.380072][T17034] device batadv0 left promiscuous mode 06:08:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 06:08:36 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socket$nl_sock_diag(0x10, 0x3, 0x4) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:36 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0xe) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) kcmp(0x0, r2, 0x6, r3, r4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 06:08:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xdd0d0000}, 0x0) 06:08:36 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000100)={0x9, 0x9, 0x4, 0x20000, 0x8, {0x77359400}, {0x3, 0x1, 0x8, 0x4, 0x81, 0x4, "76d5cdef"}, 0x9, 0x3, @userptr=0x5, 0x5, 0x0, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3a}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c1) 06:08:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xec6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xc000000) 06:08:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 1446.018317][T17096] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1446.020919][T17095] ptrace attach of "/root/syz-executor.4"[17090] was attempted by "/root/syz-executor.4"[17095] [ 1446.037309][T17091] device batadv0 entered promiscuous mode 06:08:37 executing program 0: r0 = io_uring_setup(0x31a, &(0x7f0000000000)={0x0, 0x0, 0xb, 0x0, 0x20001}) creat(&(0x7f0000000080)='./file0\x00', 0xac) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000000c0)={0x6, @output={0x0, 0x1, {0x1, 0x6}, 0x3f80000, 0x7fffffff}}) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) [ 1446.121376][T17091] device batadv0 left promiscuous mode 06:08:37 executing program 0: r0 = io_uring_setup(0x1af, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x11ca}) io_uring_enter(r0, 0x800024, 0x9, 0x1, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4001, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x66401, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x200080, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2) 06:08:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 06:08:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 06:08:37 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xff) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 06:08:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xed6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xe000000) 06:08:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 1446.668618][T17129] device batadv0 entered promiscuous mode [ 1446.698582][T17134] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1446.757705][T17129] device batadv0 left promiscuous mode 06:08:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 06:08:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xfffffff5}, 0x0) 06:08:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) [ 1447.179149][T17129] device batadv0 entered promiscuous mode 06:08:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) [ 1447.248601][T17129] device batadv0 left promiscuous mode 06:08:38 executing program 0: r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1ff}, @NFACCT_BYTES={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x8c3, @rand_addr="bf959fcabc7259cd74ffffd3ddbae264", 0x8a}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}], 0x3c) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f00000002c0)=0x5) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000280)=0x100000000) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) r6 = getpgrp(r5) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000100)=r6) 06:08:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x2) 06:08:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x10000000) [ 1447.497253][T17161] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x3) 06:08:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xee6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x4) 06:08:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xa) [ 1447.908080][T17172] device batadv0 entered promiscuous mode 06:08:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xe) [ 1447.992248][T17172] device batadv0 left promiscuous mode [ 1448.109415][T17161] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xf) 06:08:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x60) [ 1448.437898][T17172] device batadv0 entered promiscuous mode 06:08:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xf0) [ 1448.522812][T17172] device batadv0 left promiscuous mode 06:08:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x300) 06:08:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x1f000000) 06:08:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xa00) [ 1448.750923][T17203] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xddd) 06:08:39 executing program 0: r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) r1 = creat(0x0, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00') ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000001c0)={0x5, 0x80000001, [{0x1f, 0x0, 0x50b75a8d}, {0x8, 0x0, 0x9}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x2}, {0x562ca973}]}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x4, 0x70bd2d, 0x3f, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x48014) r3 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r3, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xef6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xe00) 06:08:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x20000000) 06:08:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xf00) [ 1449.247241][T17223] device batadv0 entered promiscuous mode [ 1449.318446][T17223] device batadv0 left promiscuous mode [ 1449.324671][T17228] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x3f00) 06:08:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x6000) 06:08:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xdd0d) 06:08:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf06a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x30000000) 06:08:40 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f00000001c0)=""/127, 0x7f}], 0x2) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001380)={{0x2, 0x4e24, @rand_addr=0x8}, {0x306, @random="bbdd2d6a4e6b"}, 0x18, {0x2, 0x4e20, @local}, 'geneve0\x00'}) r2 = semget(0x3, 0x2, 0x620) semctl$GETPID(r2, 0x4, 0xb, &(0x7f0000000380)=""/4096) semctl$IPC_INFO(r2, 0x1, 0x3, &(0x7f0000000240)=""/157) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28001, 0x0) r4 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r5, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001400)={r5, 0x1000, "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"}, &(0x7f0000000040)=0x1008) [ 1449.999472][T17248] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1450.017039][T17246] device batadv0 entered promiscuous mode 06:08:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xf000) [ 1450.082449][T17246] device batadv0 left promiscuous mode 06:08:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xf0ffff) 06:08:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x1000000) 06:08:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x2000000) [ 1450.487034][T17246] device batadv0 entered promiscuous mode [ 1450.558350][T17246] device batadv0 left promiscuous mode 06:08:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x3000000) 06:08:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x3f000000) [ 1450.778870][T17276] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:41 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e20, @broadcast}}}, 0x88) 06:08:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x4000000) 06:08:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xa000000) 06:08:42 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e20, @broadcast}}}, 0x88) 06:08:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xe000000) [ 1451.258287][T17286] device batadv0 entered promiscuous mode 06:08:42 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e20, @broadcast}}}, 0x88) 06:08:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xf000000) [ 1451.337325][T17286] device batadv0 left promiscuous mode 06:08:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x3f000000) [ 1451.440453][T17276] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:42 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x60000000) 06:08:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x40000000) 06:08:42 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x9effffff) 06:08:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf16a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1451.977508][T17328] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:43 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xdd0d0000) 06:08:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xf0ffffff) 06:08:43 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1452.337344][T17336] device batadv0 entered promiscuous mode 06:08:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xf5ffffff) [ 1452.419757][T17336] device batadv0 left promiscuous mode 06:08:43 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1452.502783][T17328] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xfcffffff) 06:08:43 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x48000000) 06:08:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xfffff000) 06:08:43 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf26a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xffffff7f) [ 1453.048438][T17381] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1453.077853][T17376] device batadv0 entered promiscuous mode 06:08:44 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1453.156165][T17376] device batadv0 left promiscuous mode 06:08:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xffffff9e) 06:08:44 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xfffffff0) 06:08:44 executing program 0: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xfffffff5) 06:08:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf36a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x4c000000) 06:08:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xfffffffc) 06:08:44 executing program 0: perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1453.806018][T17422] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1453.819295][T17420] device batadv0 entered promiscuous mode 06:08:44 executing program 0: perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1453.879237][T17420] device batadv0 left promiscuous mode 06:08:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xf0ffffffffffff) 06:08:45 executing program 0: perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x100000000000000) 06:08:45 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x200000000000000) [ 1454.318737][T17420] device batadv0 entered promiscuous mode 06:08:45 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1454.406187][T17420] device batadv0 left promiscuous mode 06:08:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x300000000000000) [ 1454.519157][T17422] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf46a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x60000000) 06:08:45 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x400000000000000) [ 1455.006662][T17477] device batadv0 entered promiscuous mode [ 1455.041190][T17483] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xa00000000000000) [ 1455.094603][T17477] device batadv0 left promiscuous mode 06:08:46 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xe00000000000000) 06:08:46 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xf00000000000000) 06:08:46 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x3f00000000000000) [ 1455.606757][T17477] device batadv0 entered promiscuous mode 06:08:46 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1455.696174][T17477] device batadv0 left promiscuous mode [ 1455.828784][T17483] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf56a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x68000000) 06:08:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x6000000000000000) 06:08:47 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1456.256880][T17535] device batadv0 entered promiscuous mode [ 1456.268241][T17539] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:47 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x9effffff00000000) [ 1456.340271][T17535] device batadv0 left promiscuous mode 06:08:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xdd0d000000000000) 06:08:47 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:47 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xf0ffffff00000000) 06:08:47 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xf5ffffff00000000) 06:08:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf66a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x6c000000) 06:08:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xfcffffff00000000) [ 1456.961064][T17580] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:48 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1457.007414][T17578] device batadv0 entered promiscuous mode [ 1457.081342][T17578] device batadv0 left promiscuous mode 06:08:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xffffff7f00000000) 06:08:48 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xffffffff00000000) 06:08:48 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0xfffffffffffff000) 06:08:48 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf76a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x40, 0x8, 0x201b, 0x2, 0x9, 0x1, 0x2, 0x3}}) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000180)=0x8, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020601000000000000000000c2d51b20bf5c3b670000000011000300686173683a6e65742c6e6574000000000900020073797a31000000000c009f8008000640000000000500010007eaff000500040000000000"], 0x58}}, 0x0) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) splice(r3, &(0x7f0000000080)=0x8, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffffff80, 0x1) 06:08:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x6d6a0100) 06:08:48 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1457.774201][T17608] device batadv0 entered promiscuous mode [ 1457.830947][T17614] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1457.854892][T17608] device batadv0 left promiscuous mode [ 1457.904350][T17622] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:08:48 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) 06:08:49 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1458.276676][T17608] device batadv0 entered promiscuous mode [ 1458.336586][T17608] device batadv0 left promiscuous mode 06:08:49 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1458.449529][T17614] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 06:08:49 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:08:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf8020000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:49 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x6000000000010, 0x3, 0x0) connect$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0xffffffff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000010}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x50, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:08:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x6e6a0100) 06:08:49 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1458.988728][T17664] device batadv0 entered promiscuous mode [ 1459.035942][T17671] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1459.090798][T17664] device batadv0 left promiscuous mode 06:08:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf76a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) [ 1459.556483][T17683] device batadv0 entered promiscuous mode [ 1459.627627][T17683] device batadv0 left promiscuous mode 06:08:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$getregset(0x4204, r1, 0x6, &(0x7f0000000100)={&(0x7f0000000080)=""/120, 0x78}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) [ 1459.767241][T17664] device batadv0 entered promiscuous mode 06:08:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x6f6a0100) [ 1459.826896][T17664] device batadv0 left promiscuous mode 06:08:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x410000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x228, r2, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x25ce, @local, 0x411}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55cce32}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x27de}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff92}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e36}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x8800}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000080010000000c43cbb5adce3ceb57566ed6c594000000000000000000001100037e2c6e65740000bebb1dc8270476546b07ab614deb0e00000900060063797a310000000000050001000700000005001d6affe56f1330275b6228efc5bb111037690c415aac5b563d4f9c44941bf9de0554845b3716cb1e790ca3bcd5f8b218962e3467ebf3e28b02d2c8cf5cccddf544673af1e2a2ae06a9560436f0b85958b901b4861d238e7e4588"], 0x58}}, 0x0) [ 1459.884883][T17698] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf56a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x2000) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x4810) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x3f, 0x1f) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x2, &(0x7f00000004c0)="af1ff35ab4972782d1be851606a0d9117423b08ba5218cce2e091461df4f76c1d4150dcd55e7c00c453ff8a4f80000000000000000e0ffffff00000000070c36c9611dc1de91d2f010bc6727bff534499e874f680c3053fce86079e866cbc0d40565e6e11033372213a4044c98b528d1fe0f9e3d3182012629dd769f0f1d2cb283624df14a29b068c6445273a6422d3d1fee4d467ce8123a69a0462cbd0ee128f28330a2e4a0613494d556ab7b4ec7f4e0deaff5e0964b41718fddc13e6e04e327e27d0f7675653df89092abff9834bb2d57eca229665ebd0b6c39d3f409b2e841ea12f971c53c2467dad5e588fcc4249002ced64a6938c965225290f4c49f26f26eb8eafaa0ba551c304d59d077a75754d5c28f4984feb60c96f99a07bb0004e57b4d5bc86f68abb22bef8d9b93692ec4e4ce1c81b3fd57fb58a678ac2238c560c58e993b424967893ebc5738017ad744112c16b67e9be14a2dccbb767a66383cc55da0f683c3c771ffdf6679c2f015db71f78dcf73c526ef61e2632caa34d51c129e5a530cfdfc13657f10ecc41734fb30213f167fa35bcbbdcaab2732f668ac75074b8a724a65d2191b41175cfa1c051a15e170c5cfd68fa3e8cb8448c9ac9d49f43ec15fc7c4e0adff8bf5471c58c74fbe00"/478) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1460.286327][T17709] device batadv0 entered promiscuous mode [ 1460.367009][T17709] device batadv0 left promiscuous mode 06:08:51 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f018ad64173d8ea78ad50d6c32f1"], 0xe}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x120}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4200, r1, 0x0, 0x0) tkill(r1, 0x3c) [ 1460.471505][T17698] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf86a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:51 executing program 2: sysfs$1(0x1, &(0x7f0000000080)='hash:net,net\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:08:51 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @initdev}, &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@rand_addr="3df3b94e7fdaf0b5412e57bb5c877c63", 0x3, r3}) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000)=0x5f, 0x4) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:51 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) sched_getparam(r2, &(0x7f0000000000)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x84, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x38, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROBES={0x5, 0x15, 0xd0}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x63}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x84}}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 06:08:51 executing program 2: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xbb, 0x8800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020601000000000000000000020000001100030068617365742c6e6574000000000900020073797a31000000000c0007800800124000000008050001000700000005000400000000000500050002000000"], 0x58}, 0x1, 0x0, 0x0, 0xd4}, 0x0) 06:08:51 executing program 4: r0 = getpid() pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x74, 0x0, 0x210, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xf1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7c}, @NL80211_STA_WME_MAX_SP={0x1c, 0x2, "506f442b6b74dbd86e66fe45f6602bcfa98d59aacc4b782c"}, @NL80211_STA_WME_MAX_SP={0x4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x28}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x74}}, 0x4000) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) [ 1460.916250][T17733] device batadv0 entered promiscuous mode [ 1461.021746][T17733] device batadv0 left promiscuous mode [ 1461.034082][T17750] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1461.084842][T17753] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 06:08:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x706a0100) 06:08:52 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e20, @broadcast}}}, 0x88) 06:08:52 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$getsig(0x4202, r0, 0x985, &(0x7f0000000080)) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="230000003701200105000000000000000300000000000000", @ANYRES32=r0, @ANYBLOB="e10cd71c070d3ca677324d808b72138e09d7dd7ef0caee5302707908f4b8593936321097f050541b7a3b3b592f835bc75996b86ab55d359f32765b8e5459daf3502b48c36fbfc49d06868792a27c41ba563467754250a489d79dbf313fbbe0a1675ee64c0341aac41f973e871a2540c378683d7cf83f67391d33032b2f7afb4175de205a1f94a705e443b239"], 0x23) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000000900020073791a123095db17a336722a5944e07a31000000000c000780080006400000000005000100070000000500040000280df29a4bdf4dbc961d498d481b240000000500050002000000"], 0x58}}, 0x0) 06:08:52 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) [ 1461.285456][T17766] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:52 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e20, @broadcast}}}, 0x88) 06:08:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf96a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0x82}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:08:52 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e20, @broadcast}}}, 0x88) 06:08:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x716a0100) 06:08:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x9}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x6c}}, 0x0) r1 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/193) prctl$PR_SVE_GET_VL(0x33, 0x1a3f2) [ 1461.846769][T17786] device batadv0 entered promiscuous mode [ 1461.847125][T17793] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:52 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1461.923287][T17786] device batadv0 left promiscuous mode [ 1462.246301][T17786] device batadv0 entered promiscuous mode [ 1462.305634][T17786] device batadv0 left promiscuous mode [ 1462.401359][T17793] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:55 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 06:08:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x98, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x98}}, 0x20000000) 06:08:55 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_uring_setup(0x65, &(0x7f0000000040)) 06:08:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfa030000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x726a0100) [ 1464.149081][T17827] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a31000000000c0007800800064000000000050001000700000005000400000000000500050002000000ce88737ee8a00114f3dc41aa"], 0x58}}, 0x0) [ 1464.207893][T17826] device batadv0 entered promiscuous mode 06:08:55 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000080)) io_uring_setup(0x65, &(0x7f0000000040)) [ 1464.280094][T17826] device batadv0 left promiscuous mode 06:08:55 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r1}) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="f9473aa5f7d9993f88543f8b1e4020293e2f5d69db27c5030079cf243a55c5f96a43326de38235bd6fad8a880c9a56aa4f7a10510e3d333109202f4b624b7e", 0x3f, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:08:55 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) io_uring_setup(0x65, &(0x7f0000000040)) 06:08:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) r5 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x492492492492778, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28001, 0x0) r7 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000000c0)={r8, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000240)={r8, 0x8001}, 0x8) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newaddr={0xc8, 0x14, 0x100, 0x70bd26, 0x25dfdbfe, {0xa, 0x3f, 0x1c, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x6efcc84, 0x8, 0x7, 0x7fffffff}}, @IFA_CACHEINFO={0x14, 0x6, {0xffff, 0x101, 0x6, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x16}}, @IFA_FLAGS={0x8, 0x8, 0x86}, @IFA_FLAGS={0x8, 0x8, 0x21}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:08:55 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) [ 1464.726567][T17826] device batadv0 entered promiscuous mode [ 1464.804347][T17826] device batadv0 left promiscuous mode 06:08:55 executing program 0: io_uring_setup(0x65, &(0x7f0000000040)) [ 1464.923623][T17827] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1464.947285][T17865] device batadv0 entered promiscuous mode 06:08:55 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() getpid() wait4(r0, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:08:56 executing program 0: io_uring_setup(0x65, &(0x7f0000000040)) [ 1465.032440][T17865] device batadv0 left promiscuous mode 06:08:56 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000000)={0x0, 0x4}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000100)) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 06:08:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfa6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x736a0100) 06:08:56 executing program 0: io_uring_setup(0x65, &(0x7f0000000040)) 06:08:56 executing program 0: perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) [ 1465.445972][T17865] device batadv0 entered promiscuous mode [ 1465.495260][T17911] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1465.523634][T17865] device batadv0 left promiscuous mode 06:08:56 executing program 0: perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) [ 1465.647547][T17909] device batadv0 entered promiscuous mode 06:08:56 executing program 0: perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) [ 1465.706348][T17909] device batadv0 left promiscuous mode 06:08:57 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x7ab05a2e767ad231, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000000c0)=""/45) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a3100000000120007800800064000000000050001001700000005000400000000000500050002000000"], 0x58}}, 0x0) 06:08:57 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) 06:08:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfb6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:57 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) 06:08:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x74000000) [ 1466.246112][T17947] device batadv0 entered promiscuous mode [ 1466.308988][T17947] device batadv0 left promiscuous mode [ 1466.379727][T17957] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:59 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0xe) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 06:08:59 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x68, 0x3ff80, 0xffffffff, 0xffff, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)={r2}) r3 = dup3(0xffffffffffffffff, r0, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000140), &(0x7f0000000180)=0x4) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:08:59 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) 06:08:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032cbd7000fcdbdf25000000000800050001000000060006004e2000000800010055da58ec4d7ba2b2b6846842c95d3a501c6733d07bda0a7b43582c94cc6787f3c3ed490d958e55c4336600b12b83b0b71098bbaab178e0a275565c400fb9b17da2c11ec14e359b", @ANYRES32=r6, @ANYBLOB="08000700ff010000140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4004) 06:08:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfc6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:08:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x746a0100) [ 1468.188650][T17974] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:08:59 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) 06:08:59 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) [ 1468.406576][T17976] device batadv0 entered promiscuous mode [ 1468.475249][T17976] device batadv0 left promiscuous mode 06:08:59 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) 06:08:59 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) [ 1468.585889][T17988] device batadv0 entered promiscuous mode 06:08:59 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) [ 1468.645415][T17988] device batadv0 left promiscuous mode 06:08:59 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) [ 1468.758332][T17974] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1469.076677][T18041] device batadv0 entered promiscuous mode [ 1469.126571][T18041] device batadv0 left promiscuous mode 06:09:02 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$cont(0x20, r2, 0xfffffffffffffffc, 0x100000000) 06:09:02 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) 06:09:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfd6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:02 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0xe) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) r2 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r2, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:09:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x74e70200) 06:09:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000480000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a31000000000c0007800800040000000000000001000700000005000400000000000500050002000000"], 0x58}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x1, 0x7ff, 0x1, 0x7}, 0x8}) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x3, 0x975}) [ 1471.257192][T18055] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1471.265845][T18053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1471.315887][T18056] device batadv0 entered promiscuous mode 06:09:02 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x8102c000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) ptrace$getsig(0x4202, r0, 0x2, &(0x7f0000000000)) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:02 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, &(0x7f0000000040)) [ 1471.395722][T18056] device batadv0 left promiscuous mode 06:09:02 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffee7}, 0x20000000) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) ptrace$cont(0x18, r1, 0x2, 0xfffffffffffffffd) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:02 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, &(0x7f0000000040)) 06:09:02 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, &(0x7f0000000040)) 06:09:02 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, 0x0) 06:09:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfe6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x756a0100) [ 1471.941757][T18098] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1471.986136][T18097] device batadv0 entered promiscuous mode 06:09:03 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, 0x0) [ 1472.057067][T18097] device batadv0 left promiscuous mode 06:09:03 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/232) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000200)={0xa20000, 0x3, 0xfff, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x98090c, 0x6, [], @value64=0x2e941320}}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28001, 0x0) r5 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={r6, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r6, 0x1ff}, &(0x7f0000000280)=0x8) 06:09:03 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, 0x0) 06:09:03 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0xe) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004ec0)=[{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="d1ff871695820bf2441176b9068aadcfe3043b5c0aa5c5d54b8e877e42d9912940b6ad5771aa97470d49d09e68178024c010fa7d5d8a757ea0398a949c67f0f4aa091bfb09452f5f1232411b0f274a22f3d831b51028744fe0451fceee0440a829ecd2875064", 0x66}, {&(0x7f0000000180)="ae83a01da27e182e23cad25fb13cfa9a6b7f1f9dcf5e2691ca4fb913d70ff75faf817b24c563e1c10821211a2a9b75f5e328ea8591cef9f2944c6404682fd60160dc3be4004d9800a918c11154403a67a9dee5d4c6222826a56e4779d9c73c90b4df7f4f5aab6aa8f5134a7eaf55f8d7cb26db39411d9dcfee1baa825c3542cb99751429a432b5c77e6a19118a81a3802fa35ee70a463061acac703d0e63e2fe2cc342518d554464cafc471a0f7405e79ffd73907765ca480f02143c4372cb4de8aca89da11d32baeca0451f5b9b3b97b93e0f291ac863f42f8fac62dce3fe6d760762aa9a338f2e82add169ec1bc0f49c", 0xf1}, {&(0x7f0000000280)="006a02c34eab7c6fd27a2124fc03b665fc05d2aba939ff9df567ce0355db370f7404198b13bd35949160950b27d3d3c3ba1f98c01c54eeab11e2028d30fccf528f7bd62ba2c0fe84011b9a9786ac2e4ce0022e09f7f766a108e363a362eb9fb6f2f9a6c3ab65d1b36b1ae7b8c2578a66213fcadc440d0141ca03c00ea594740cd5307b793418af78036cc0fb790939763027bc9c50f56efef2f1720a2aafa249067f1c3f6c6055bf850ea7c763f60246af035f577b1ad7f582b3ff0da09270aa428377997a1500cea2d79fcb18a57495edee7c024aa3e75aad0423ed526e64d5fbff70ebd37b8a9ec611dc8a146b2c92f3c80d5dc3", 0xf5}], 0x4, &(0x7f00000004c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x4010}, {&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)="054ef9cffaf2142b4ae660dc48e19104577cf59bc87e3c91a9589ecea6f92b73df5a87299170abd511", 0x29}, {&(0x7f00000005c0)="6f3ff8ce57ebb530d28fbfa23a16e1fcdcb71487bb372668b8f9730ac0cffcbe892fe7e2251235721c82578964c3851dae08b4cd40e122ff7cf2da88d13a22bfc851f598a8c84106f2398fc38a4b4666b4fc1c0078434986c414cdca17ddcba9148e420f22045d4dcab1d8", 0x6b}, {&(0x7f0000000640)="27c7cf2ffb70d60ec31985c6bb0d2681cff8fa82fe39cd0431", 0x19}], 0x3, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x44080}, {&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000780)="bf7391659c586ae5b7e3c1575731a91b9cc591bdc232365f7fcbb254ca1ff0b472c1c84f78939b38d134aa79ca841a4029e93898efa34522fb324948e904d9086c222dea300fad646b8c6a4875afc4573df91facbe29b260e80f91d5f73d0772c996167b96ea825a8a43179f33b3213041c11a357565808dcdb5abb972cca56d38efe860d043465f87c3dd1ee96de1688688835bd62bba3eae0604bda77b2cf32e97a8a03de2be29917f986df9", 0xad}, {&(0x7f0000000840)="7a5a866bf698f6c4c1578bb4407f3baea5e359e950a8679e61fc506d38b493ef18121aa0ddd6c5fdbafd6f0fa59f5050e25ef61260ce72078d242b28e57d4c249eecbdb235cdf9999743bc3da918decebb4c7dbe0a247093a216b47d31acc0461c4e7cd4f1e7bd1865e1f28376429eba82f18814fcfe44f92dd3ce6550f3cd2b10560825972f85447e3b68528d5aea42b4332185bfa8fe486f339ac2c591ff2d6a0153d0115a4673fdba0bf514d1e3c3b1387e31c3bbf67f8fef07f8d820708f8f3520d46c1fbac38b9fc9579f5fc740ae82ee072a69d1fb8703ba158d778a8ceca8faa34b86e03bc495", 0xea}, {&(0x7f0000000940)="ec32afdd35106c1393d6ac864d47d4eb52c518291fea6eaefaa02e6680055619a01cc0aa7e085c3927cbce17ec9f3bac188cb06a5f667a4336db9a87a1", 0x3d}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="8de8617f95feb2e4b681e2f6b674fd0be065dae4a4d70fe88ab7443625cde33f", 0x20}, {&(0x7f00000019c0)="253160ae166f9d48e9654cf14d48070b794f49f22752fd606f5a6655cce6ebf0318693ed488c51086523719ae6cba9b30940e692a67848e8c4b0aa7a504f458bc0488b5c5f373d009b834ddea609c38b9737191e2ce9f571c9899272a3b14bb45179f26bb53c5e8e422af31a861fb2cae914cf1fe0d5be0366900d62b3276f931e9d7ca80331b4398406d9337c469fd77a41c0f46a7e5ed06e3a0db9487effeefd1e01db2475cab0c17f2a4a5868ceba0cef0d6dac61852533", 0xb9}, {&(0x7f0000001a80)="2cfad643727ab2c53518e7fcac59f92c9b347e04351d845b25f7db16f8d1e31069472273dedb6a6995897b7b05009747e3273f640394cf23be9416595d2a5cd9819a11b76acc592259b0680b318ba79ee12666dec7c31be87af6791efdf4eee5b1943a7cb87cfa235883d058d83225037a33c336599f81f1e094b37c1d756c50666bde16293b6accae860c00352fa290160b0fcf14dcf176e1674757d315160d7b4a9dc7d8c044a6ca6d1237a2f69b357d0e58be8e7b79d5188b7a26eade69741084c2060a180a8d1db361cebbe431744c7af46e8df3302d83672a637ce55a9be02abeb886d3981507324deeffe0d2b85e4fef74c3d924e3f9799f3de74ee9", 0xff}], 0x7, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x20004050}, {&(0x7f0000001c80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000001d00)="0c6825d15c4ba0b50d4e10471817b936e48123306f7f375cf12894b76e5187fd07d2bfd69776099689d9677f13e6f2321760c6b0013d", 0x36}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="2367d2698b9b7e1a4ab057600fe8ff4f4c48426e3e916e174f4d7d8a84da9ca885dd8ba0571ccedc0029187231f99737fab54b838534d5630ef47a384297e84cd9fb18355f7221f3f0e4deb07b8fcf9fbe77b112ebe720dea60614edec29ac89dc7e1108354341d6872bfe3181c1397412ff075691614a4af644ae8208da552f", 0x80}, {&(0x7f0000002dc0)="b68068670aea9c25b2029f69135e7af224ec87120abe714e3db6df0d4c4ae54b8df40de93559f01607b78e0bca86367da3ab8cfefb84761b75051ee0244400a333071937cda941eed715f3dfbce7456b18931a9215563b10942ee3", 0x5b}, {&(0x7f0000002e40)="eac309ed8482b5f3be196ba1dee15f953cfdeab89ddd683570fbae085f74fb52ad8bdfcd3034cf6fa76e6356d5bd76ec628293c7f54797b89a0b67df35e686e00aeeb0f10f6e7eaf9f940c887a17160e39feed579ca92c0d1c6cf0796d3931d6718724346f542af3a3b6e6072abbeda9a3a992ebf2d13456ac100fb0d6dcd23c84679792c34cf4d73e9d7eed0287fa6ea5406db93dd9943c934e57f4c59b3c6c05743416c20a62d2cd877d3ca7161d031d4e1c74bc9ee09d584ed93f6115fc1c1305966e2f0b6280695c74c43334164ef3ded14b2244455ea99ccb108165e516404069ce8332d32549", 0xe9}, {&(0x7f0000002f40)="f9f111b46fde4cd53205fa9207941a0f963d105210cdf9ad44ef7793777b06306743e9d0bdc30319527768203470f0c1e379ebc78a3beb025dd139a2cbc82981aadff547a3f57b43bc", 0x49}, {&(0x7f0000002fc0)="7b33d47ca3e2619f1133e5374cd62b8e2f84a667d23e4771939f6c9f2903eb9b54a665872a718721387e65364999f93483f8c3548e0eb9db3aa30452664f7bb015dbfd254dabdf557c0c", 0x4a}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000004040)="a20cb246dec33d2d670b59c1496c1aa9b75d49eebc5efe941506efe883b5c3a2960e37dde9b0929c6d910da065f1c5aff66142fe13144201781ca6d200f6fe9316a229039933493411b4a1c44352626ed805", 0x52}], 0x9, 0x0, 0x0, 0x840}, {&(0x7f0000004180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000042c0)=[{&(0x7f0000004200)="e30ba8e489f577fdc6517afde86a8359859fa3f3de", 0x15}, {&(0x7f0000004240)="52f42a074310d5e85df1c35535d8ea7ad87ff29c40401279e31fe862fef58a6e4204488bea85c8a7e3ee0bab2506f49f942b831ffc6db19dbbc8020d54ab92651b8df2248723f2c255a6feea62b9", 0x4e}], 0x2, &(0x7f0000004340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38, 0x20004000}, {&(0x7f0000004380)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004480)=[{&(0x7f00000044c0)="c9a8e9a23dd998c880a24abb1d6aeda0e0bb10f58ae4bf52a4e8a50551a1b8cab1ebe73ab2ee636fca58dad32c0c7b9ed327c9a34a86b6d481272a4b3ecf74be4e9a716887ca768938d7cfcaf7ae68d3155add65c439eeba72351c34b9ae8e74242d22faf023d021f76593ab7e203b23e80a350817ae4b072afc122b024c0c59aaec6a041c32b7fe58bca609859fcde043a5fcb5f963914ae5642f4c8302d23b22c4166c83c48d7ad7107287759eba4ab844f06857b86b28c840027ee7b33c71bd2a0000000000000000", 0xca}], 0x1, &(0x7f0000004600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70, 0x4810}, {&(0x7f0000004680)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004700)="b6877ffaf70085a41bb2fec2a46fc0cf8e0a063aa2271da744", 0x19}, {&(0x7f0000004740)="de0f2940efb7d8996ce92d91fe57507a6d87483ab60b2e174634ec7ff13c17ab077fc0662185c1ab307ac1a7ec3cbef7ebdac2060bc95e48339f71edca144066087e2f1d57164f1186e96d0985223a4de9c3f11b7d2008e6b4f4ba7cd8b7fa490728a712393b0470036eb4819d3a5dddbf4a28a0d362353294fb8a246b7381b942b530923c379b0ba7ef6d6c5be2e794eadbddb4ab3e198b223773824e80fbdff610b604c3cdac169562b795b763bb796f53b6dbd80b5a1700e40604a2780b121c04e44778fd47dc", 0xc8}, {&(0x7f0000004840)="76ad474c012265de2533999a7fa2c748ad468f39c114dbe18f902f2a8ab730b9a812d709bfcd7734f8897d67fa3aeb8d3db39da8b26d5be536f7b9714b5a399adc1b089d4bc1fbd009a5eb2c90f6cf68d89480f467e6010680e9c302e4b73276380db904215b74ab1a1cd1edbdf6769013fc6b4ffdbd48cc919fe8a3b13a99066e63fa3bd9f7ad6d6577c0724d019d214c7c4caf07a8ebc8c0f1eb334594516f830ed197ddefdd371ad1da2cce56ba64c5b1babee034dc7f1362945a78a957ee1f75d6c012bef12e9538fd868e173283a3e1304c9763d1d8ff9cd4149a8b1a4df6779092db40cf", 0xe7}, {&(0x7f0000004940)="2381ae8261874282e1995a63bceda6784d2fc24dd86564502be96098bf48c3f2477ccc8839099433d0139dd5c437fd0c34bc69594512e858e4c44f3d4320d9f5f5204fba03bbd7b3cf4ecbdc85ff6f585dd310dcdcf8c06eb88e473dab562e797ee53f31a784b79e88d2ed", 0x6b}, {&(0x7f00000049c0)="449b5e86b562f062dc0788be749fb00ad842b9062104dc9ff032ae7674b2068d61a19ccbe4be7b1babc5fa2df46d7d185a9ca52245d858404a0782c219e821ed5d1d5059de362e2f1fa3ccc61c8ef1257ecc2003797981d060c0257d9e5caf4459a093865c481762500170b2aabbf6e38bdcc0dd8e181a44b834b53cc990ee0e85ab880e0c77843c08c61b7d355a54ed561fa5bac88f459726ae71da9904e7e22c2a6f94841d36e2247cdfbe58a58b5cc109ad7fc4bed7fdd1d7d1e42c16c95284fa8e5224bcf5a665", 0xc9}, {&(0x7f0000004ac0)="fe78b379e33c26bfdfa1ccc8616953c3ba5ff447e3a6a10bb6b27299723b6f48bd1f9261d87bb375d4f4e2e09b3879caab4b21f2ce2bc15be1af191d32feeb89f553519cfdde36de287cab9da86b414ad25080409b076d43be52be84b1c83b6d43ece7ff17", 0x65}, {&(0x7f0000004b40)="05d04cb9ce486dac9b5052b410140ef17d7e73345b52a5cd8415b92a934849e14fae9e07c39f9834ad1e94710f41ce04baacf0badd19c547d81207ca612b8d517cd3d92a5ebb516d6ff3878882747f7117271e89a8b36f8f3476fe5486461ed510aa99d0b855752226212215de4253ea4f1affc9a6f8454fc9773c01b406563dea3f81fc94df3bc0f235259ebe556325281bacf772a7", 0x96}, {&(0x7f0000004c00)="1d445f8b81811c69563f998795c3b2c8cf51b216b751c04bf9eec33ff1fb2f038a52e3b20728508e1739b41b54d4c9ab7a0d39d925aa75c2ac5a4631c622da636a94e5e415a88de41bb9ad510311885fba8b4fa9319a9f376d8e93f58c309187157059359028bdfdc10d963881160749c9eb565774b21a72e2c80c2787d7b5ea46a6812e8efa4d2225032ad3e3259241fcdefec6f2cefe4340107b0f4c5e0dd35d286c", 0xa3}, {&(0x7f0000004cc0)="f009964be0ec8b903afadfa0696cfdf7720ff8ee84f058e946daed0be2242897c54a706768912a75897755645b71d69ffc0c3ed9b874851c92b11747a1e1fe45cc64d0ea5f8acb75", 0x48}], 0x9, &(0x7f0000004e40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x50, 0xa4e0a05ed3952a3f}], 0x7, 0x20000020) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:03 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) mq_notify(r3, &(0x7f0000000380)={0x0, 0x0, 0x2}) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setfsgid(r6) fchown(r3, r5, r6) r7 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r8 = geteuid() fsetxattr$system_posix_acl(r7, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="020000000100000000080000", @ANYRES32=0x0, @ANYBLOB="00002200795086574bf2fbc3", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) write$P9_RSTATu(r1, &(0x7f0000000140)={0x97, 0x7d, 0x1, {{0x0, 0x82, 0x6, 0x5, {0x10, 0x4, 0x8}, 0xf8e09fd65f5035c0, 0x401, 0x8000, 0xd46, 0x5, 'syz1\x00', 0xd, 'ppp1vboxnet0O', 0x3c, 'mime_type\'\'(eth1+em1vboxnet1eth1#keyringsystemself[\\vmnet1%\\', 0x1, '#'}, 0x0, '', 0x0, r6, r8}}, 0x97) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:09:03 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000000)=0x7) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfb6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:03 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0xe) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x2, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0xfffffffffffffffe) 06:09:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000000900ee7f73797a31000000000c0007800800064000000000050081000700000005000400000000000500050f02000000"], 0x58}}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x4, 0x6}, 0xc) [ 1472.595507][T18097] device batadv0 entered promiscuous mode 06:09:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x7, 0xff, 0x7b, 0x7, 0x2, 0x0, 0x40, 0xd7, 0x40, 0x3be, 0x8, 0x4, 0x38, 0x2, 0x4, 0x400, 0x7f}, [{0x6, 0x100, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff8, 0x9, 0x8, 0x7}, {0x6474e551, 0x2, 0x9, 0x1, 0x100, 0x1d4, 0x2000000, 0x81}], "559ecbb14c6f0b265232291950eb22d417005191a60a79eda8b28ceff6da856fd57eaedbbb162974b8daea4e132714f3181da083c8dbaaa6917ad2cb33726eef9632de51fd94ca1ae5b0760897f133", [[], [], [], [], [], [], [], []]}, 0x8ff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) [ 1472.665876][T18097] device batadv0 left promiscuous mode [ 1472.825964][T18137] device batadv0 entered promiscuous mode [ 1472.895626][T18137] device batadv0 left promiscuous mode 06:09:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfeff0000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES64], 0x1}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) sendmsg$AUDIT_USER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xc4, 0x3ed, 0x200, 0x70bd28, 0x25dfdbfb, "8f062e2cb1c90573716854e51d17f9efca8a9a2b0d190fa78b9db78d24341f773c861ae128d73d8e0340013c0a44d64bb3b18e76e0175b292b09dd092771bf621f24e44a9e074c3ff8070958bec2953049d82a60606ec8b074cad386e06d9772a6b27cc6625062c35a80b9414bc9776045d4eb4f0abf7e9ddbfc75f396430282bee5e93de33fe14babeebc82d6b6523d06120c8357122d6982767e096e60919348185af80ca2d2870fa048e039210e08c86f4d0a", [""]}, 0xc4}, 0x1, 0x0, 0x0, 0x10800}, 0x4000040) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RSTATFS(r2, &(0x7f0000000200)={0x43, 0x9, 0x2, {0x10f, 0x4, 0xe00, 0xffffffffffff0000, 0x400, 0x5, 0x7, 0x0, 0x400}}, 0x43) 06:09:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x766a0100) [ 1473.089887][T18167] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:04 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="c291645d611fce70df821ea8018218d50c741bdefb582c4156381c87aeff24d0ae1c9b1bc1154df8", 0x28) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x3932, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x40011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000100)={0x5c, 0x2, 0x6, 0x8, 0x40}) 06:09:04 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = accept$inet(r2, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@loopback, @remote, @multicast1}, &(0x7f0000000080)=0xc) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:04 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x140f, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x48094}, 0x88080) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x800) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x26, 0x7a, 0xf8, 0x1, 0x0, 0x77d8, 0x1000, 0xf, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x100, 0x2}, 0x85b8, 0x0, 0x2, 0x0, 0x3, 0x1, 0x97}, 0x0, 0xe, r3, 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) read$FUSE(r4, &(0x7f00000004c0), 0x1000) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1473.435377][T18172] device batadv0 entered promiscuous mode [ 1473.517913][T18172] device batadv0 left promiscuous mode 06:09:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfb6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1473.639844][T18167] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x5, 0xa, 0x75) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000140)=0x17ee4218) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000002840)={@any, 0x3, 0x6, 0x7}) close(r3) r5 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x492492492492778, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0xe) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000080)=0xbe3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r6 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000180)=0x4ad) 06:09:05 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x10000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x4080) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x8000, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000100)) [ 1474.067167][T18210] device batadv0 entered promiscuous mode [ 1474.134802][T18210] device batadv0 left promiscuous mode 06:09:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfeffffff, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x776a0100) [ 1474.406547][T18238] device batadv0 entered promiscuous mode [ 1474.423323][T18240] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x1}, 0x14}}, 0x0) [ 1474.479369][T18238] device batadv0 left promiscuous mode 06:09:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) splice(r1, &(0x7f0000000080)=0x5, r0, &(0x7f00000000c0)=0x7, 0x7fffffff, 0xd) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40000, 0x19) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000240)={0xc023, 0x3}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', r6}) 06:09:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfb6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1474.895505][T18254] device batadv0 entered promiscuous mode [ 1474.966686][T18254] device batadv0 left promiscuous mode 06:09:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xff00ffff, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1475.095802][T18256] device batadv0 entered promiscuous mode [ 1475.146707][T18256] device batadv0 left promiscuous mode 06:09:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x786a0100) [ 1475.277626][T18267] device batadv0 entered promiscuous mode [ 1475.299350][T18274] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1475.345267][T18267] device batadv0 left promiscuous mode 06:09:06 executing program 0: r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000002c0), 0x4) r1 = io_uring_setup(0x65, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}, 0x1082c, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r3, &(0x7f00000000c0)=""/26, 0x1a) getdents(r3, &(0x7f0000000080)=""/33, 0x21) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='rose0\x00', 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) r4 = request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)=')md5sumcgroup\x00', 0xfffffffffffffff8) add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="d53ecb425bab3d538df703bd3f38ea68ac3558bbc8409816365b44a62a3cee1a9856677556b3933438479870b58b5b665180db386258ab7995a857b99878d31da4cba3d9d4f5717d7c78a0cb746d40d82533ab14e9436b43596983f8dc7b3f90d6781c055f11d5597df8d6b78cb5b7bb5432e9ec2dda58e1128c9ff6ef1772e3be3b8e3de3d917cf24c319002222db544cca661ba71e1e27114de7e480006a273978398e203ed7830353b5301ab830bc6bdac39c23b9dc0b3fa5c900d1cb4b9a46e497e19923ec717889972645b7e3cc320450313730e7eed4c3adae0b77", 0xde, r4) [ 1475.854057][T18274] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x796a0100) 06:09:07 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r2, 0x909, 0x0, 0x0, {{}, {}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x38, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x1c, 0x18, {0x6, @bearer=@l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000000900130073797a31000004000c0007800800064000000000050001000700000005000400000000000500050002000000fe6db8b41518b8706be5385c549982bded9e09fe7ad651fb131041456a14220dbda676bbf9c423af60421a"], 0x58}}, 0x0) 06:09:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xff0f0000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:07 executing program 0: r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000002c0), 0x4) r1 = io_uring_setup(0x65, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}, 0x1082c, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r3, &(0x7f00000000c0)=""/26, 0x1a) getdents(r3, &(0x7f0000000080)=""/33, 0x21) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='rose0\x00', 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) r4 = request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)=')md5sumcgroup\x00', 0xfffffffffffffff8) add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="d53ecb425bab3d538df703bd3f38ea68ac3558bbc8409816365b44a62a3cee1a9856677556b3933438479870b58b5b665180db386258ab7995a857b99878d31da4cba3d9d4f5717d7c78a0cb746d40d82533ab14e9436b43596983f8dc7b3f90d6781c055f11d5597df8d6b78cb5b7bb5432e9ec2dda58e1128c9ff6ef1772e3be3b8e3de3d917cf24c319002222db544cca661ba71e1e27114de7e480006a273978398e203ed7830353b5301ab830bc6bdac39c23b9dc0b3fa5c900d1cb4b9a46e497e19923ec717889972645b7e3cc320450313730e7eed4c3adae0b77", 0xde, r4) 06:09:07 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, 0x0, 0xfffffffffffffffc, 0x400000000004157) exit(0x800) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00'}) [ 1476.493246][T18298] tipc: Enabling of bearer <:> rejected, illegal name [ 1476.539185][T18305] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1476.625603][T18304] device batadv0 entered promiscuous mode 06:09:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) [ 1476.709011][T18304] device batadv0 left promiscuous mode 06:09:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a31000000000c0007880800064000000000050001000700000005000400000000000500050002000000"], 0x58}}, 0x0) 06:09:07 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x0, 0x5, 0xff, 0x9}, {0x6, 0x0, 0x1}, {0x1, 0xc1, 0x8, 0x1}, {0x0, 0x0, 0x3f, 0xc6}]}) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x44140, 0x20) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 1477.165470][T18304] device batadv0 entered promiscuous mode [ 1477.254644][T18304] device batadv0 left promiscuous mode 06:09:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x7a000000) [ 1477.487172][T18333] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xff6a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x7a6a0100) [ 1477.945247][T18340] device batadv0 entered promiscuous mode [ 1477.975968][T18344] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1477.988574][T18340] device batadv0 left promiscuous mode 06:09:09 executing program 2: r0 = mq_open(&(0x7f0000000540)='9\xf0\xe4\x85\xa6)\x92J\xac\xa6\xc0\xda\xa8\xdb!\x94^z\xfbb\xc2\xe3j\xcdO#\f6*c\x8bc\x95\x86h\xf6\xb2=\"7\x18\xb00I\x0eW \xb3M\x00%\x80\xa19\xdc\x01v\xfa\xef!{\x009\xd7\x99\xb4\x1d\xaf\t\xd4f\xb4\xe7lT%\xb7\xd3\xb4\x9b\xb0\r<\xaaz\x17\x1b\x1a\xd3\xcco\xcfV\xef\xa6\xdc\v@\x11\x89\x19\x1e\xc9\xd8i\xf6\xb2 \xfd\xa2\xd1\\\xe7%\xc3\xdf0\'r\xc0\xb8\xae\xe8\xa6\x8d(}\xbb\x9b}aT\xed\xf6\t\xb0\x1b_\xfdf\x9a\x8fD\xed\x10\x15p\xb3\xdf\xc3\x16\xcdSW\xfc8\xefk.j\v\xeeG\x90\x82\xde4=\fS\xf7\xbd\x8cQ\x96\xa7\xdc.\x9e\xcc\x1b:?\n\xe9\xd4[\x00\x04\"\xb5\xa0q\xed\x96+:\x10\xbb\xae\xb0p\xa9\xaf\n\x86Qs\x01\x8c\x17\x15\xb5\xc8C\xd1\xbb\xc1*\xde\xf3\x7f6{\x17\xe6\x8d+s\xe5h/\xa7p\xcf\xaaQ\x9e:~\x04\xd7\xfe\xbf\x17G\f\xde]\xf4U\x17C\xe9\xb8\xd5I\xa7X\xf7\xcb\xa2\xba\xdb\xaf0\x94}\xb0\xf4.@\xb8yDW-a\v\xc2\x9b)\xe9\x82\xb1H\xaeg\xe6VB\xbd\xc2C', 0x842, 0x0, 0x0) mq_notify(r0, &(0x7f0000000380)={0x0, 0x0, 0x2}) socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setfsgid(r3) fchown(r0, r1, r3) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3020800}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="9684f863", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf21042f6800000200000008000204000100000800040016ff05c3cf9bcba4f6dc00000000ffff000000001476c22963fe5287bfa0f4ed0ffaba877816230d3ce7abec8671015568de56726089fc37a95e2f15c010188fb9b53c55afaef9549ec172abd64310353622d6a85b767a18610ef4d0c2011bcf08b37197250d648300"/149], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) mq_notify(r4, &(0x7f0000000380)={0x0, 0x0, 0x2}) r5 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setfsgid(r7) fchown(r4, r6, r7) setresgid(r2, 0x0, r7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0) pause() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[]}}, 0x0) 06:09:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xff7f0000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x7b6a0100) [ 1478.490269][T18359] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1478.514891][T18357] device batadv0 entered promiscuous mode [ 1478.595647][T18357] device batadv0 left promiscuous mode 06:09:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x7c6a0100) [ 1478.964970][T18357] device batadv0 entered promiscuous mode 06:09:10 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x0, 0x5, 0xff, 0x9}, {0x6, 0x0, 0x1}, {0x1, 0xc1, 0x8, 0x1}, {0x0, 0x0, 0x3f, 0xc6}]}) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x44140, 0x20) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 1479.014505][T18373] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1479.065135][T18357] device batadv0 left promiscuous mode 06:09:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='smaps_rollup\x00') r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) 06:09:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) r5 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x492492492492778, 0x0) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="b7ff9190dea07b233e20d6529cce869047767a8015808659516a1865cf3738dc8962df130cc230f024f90604e25bb7833cc6b159098297a4f270dd819b9bdc751b76ed3f2af305acbb46bc22f0553bbd862bf7d356c311b70ec4bad8635cba9a0e304a1293aa4417e9b280a63dd609e6fc2963a4710dbd5ad9c1b45e9b9ad08247c905fa4db82b7e56225ebb35da8359b8925d1f24282534559af52fe0b9d39d4a85f7bf58bd0e1d061c3951d332efce2c10d3d90f4532da4f", @ANYRESHEX=r1, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRES16=0x0, @ANYRES64=r4, @ANYRES32=r0, @ANYPTR64, @ANYRES64]], @ANYRES32=r5, @ANYRES64=r5], 0xdf) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x561, 0x3, 0x40, 0x8}, {0x5, 0x8, 0x1f, 0xee7c}, {0x8, 0x0, 0x1f, 0x3}]}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000020601020000000000000000000000006a0f1c16ac234eafd1dbc49afb0b1959a975fbedd16720516c37b23a725208877fe66c6e5a04ef9c5d290239887e3b0cae2215791ebea8fa0bedf8e461ad"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 06:09:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffff00ff, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x7d6a0100) [ 1479.715900][T18390] device batadv0 entered promiscuous mode [ 1479.725363][T18394] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1479.801611][T18390] device batadv0 left promiscuous mode 06:09:11 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0xe) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) [ 1480.264911][T18390] device batadv0 entered promiscuous mode 06:09:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), 0x4) [ 1480.357319][T18390] device batadv0 left promiscuous mode [ 1480.457643][T18394] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0xa5, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_REVISION={0x0, 0x4, 0x3}]}, 0x58}}, 0x0) 06:09:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x64}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x100, 0x17, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x84, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x81) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1eea}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r4, 0x74, &(0x7f0000000100)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x401, @mcast2, 0x4}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x400, @remote, 0x6}, @in6={0xa, 0x4e21, 0x7f, @mcast2, 0x40}]}, &(0x7f00000001c0)=0x10) 06:09:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffff0300, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x7e6a0100) [ 1480.914778][T18427] device batadv0 entered promiscuous mode [ 1480.967144][T18427] device batadv0 left promiscuous mode [ 1480.989720][T18431] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005c80)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r9 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r9, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000005dc0)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000005e00)=0xc) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000006300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000062c0)={&(0x7f0000005e40)={0x460, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x7, 0x1, 0x7, 0x31fe}, {0x20, 0x4, 0x7, 0x7}, {0x2, 0x32, 0x8, 0x200}, {0x8, 0x8, 0x3, 0x40}, {0x7, 0x81, 0x6, 0xe1}, {0x4, 0x70, 0x8, 0x2}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x1, 0x8, 0x30, 0x7d3}, {0x5, 0x3f, 0x20, 0x2}, {0x6000, 0x9, 0x37}, {0x1, 0x2, 0x5, 0x7fffffff}, {0x12, 0x81, 0x20, 0x800}, {0x2, 0x3, 0x40, 0x9}]}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x80, 0xdb, 0xdd, 0x3}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xeb9}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r10}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x460}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) [ 1481.324657][T18427] device batadv0 entered promiscuous mode [ 1481.397353][T18427] device batadv0 left promiscuous mode [ 1481.564800][T18440] device batadv0 entered promiscuous mode [ 1481.605237][T18440] device batadv0 left promiscuous mode [ 1481.713902][T18431] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1481.745519][T18443] device batadv0 entered promiscuous mode [ 1481.829890][T18443] device batadv0 left promiscuous mode 06:09:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xff7f0000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1482.224371][T18444] device batadv0 entered promiscuous mode 06:09:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffa888, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1482.301398][T18444] device batadv0 left promiscuous mode [ 1482.425402][T18460] device batadv0 entered promiscuous mode [ 1482.486923][T18460] device batadv0 left promiscuous mode 06:09:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x7f6a0100) [ 1482.634698][T18466] device batadv0 entered promiscuous mode [ 1482.683594][T18478] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1482.695112][T18466] device batadv0 left promiscuous mode [ 1482.844815][T18468] device batadv0 entered promiscuous mode [ 1482.924556][T18468] device batadv0 left promiscuous mode 06:09:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xff7f0000, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:14 executing program 2: r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) rt_sigqueueinfo(r1, 0x28, &(0x7f0000000100)={0xc, 0x1, 0x80000001}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x76, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:09:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x806a0100) [ 1483.464797][T18494] device batadv0 entered promiscuous mode [ 1483.514036][T18494] device batadv0 left promiscuous mode 06:09:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x816a0100) 06:09:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x826a0100) [ 1483.695182][T18495] device batadv0 entered promiscuous mode [ 1483.792998][T18495] device batadv0 left promiscuous mode 06:09:14 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1389}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x700}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x1b7a8c9c69582b4}, 0x20000040) 06:09:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x836a0100) 06:09:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x846a0100) 06:09:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a7e) 06:09:15 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYBLOB="93cf9f4d5d213f6b3886c71af406e5dcf33b627d31b103a45ff68cd251466cb5dd2c18cd37190549a8b882a8c6fbe0635ce892b25ff103baf86390b489ae516776b8542ee95412e582359a1a813b9048de68f60783b1eec8fc88d8464f003cd29eaab5a227cdc7939a7428bbbc117d451894153c75c090aac4a8597e3616cb223232bd87299532721fef12727762819c31a3551cdacd9614a60e41270eca79637b636b4a1ea0a7e50b545b658bbcf9eddc29209e514a6831cf07aa", @ANYRES16=r2], 0x3}, 0x1, 0x0, 0x0, 0x76e75d608cfd140c}, 0x0) 06:09:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x856a0100) [ 1484.128333][T18524] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 06:09:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x866a0100) 06:09:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x876a0100) 06:09:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x88200000) [ 1484.735431][T18534] device batadv0 entered promiscuous mode [ 1484.807366][T18534] device batadv0 left promiscuous mode 06:09:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x886a0100) 06:09:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000020601000000000000000000000000000e0003006269746d61703a69700000000900020073797a31000000000c000780080013400000007f050001000700000005000400080000000000000002000000"], 0x54}}, 0x0) 06:09:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x889914ba) 06:09:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x16a7e) [ 1485.031487][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:16 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0xe) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @bt={0x6, 0x80000001, 0x4, 0x2, 0x6, 0x7fffffff, 0x2, 0xa}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000002060100000000000000000000000096cd198cd3beff80e800e89544f2960011000300686173683a6e65742c6e6574000000000900020073797a31000000000c000780080006400000000005000100f546000005000400000000000500050002000000d6d85af7917acf26e4cd88f7ffffffb63044ed5768571e85f16ed0ea9d3e9d429ea7a2031a4188cfd32ca627591ec35a889bed84535667f36a"], 0x58}}, 0x0) 06:09:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x896a0100) [ 1485.162221][T18559] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 1485.225102][T18565] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:16 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x8034}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0xe) ioctl$VT_DISALLOCATE(r0, 0x5608) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:09:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x97ffffff) 06:09:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x9effffff) 06:09:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xba149988) [ 1485.624491][T18566] device batadv0 entered promiscuous mode [ 1485.704021][T18566] device batadv0 left promiscuous mode 06:09:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a31000000000c0007800800064000000000050001000700000005000400000000000500050002000000c8940b116467832ed468d608d83a6e5b748586f10fc2e6cf3552735d9fa76aad9f233549737ec13b325e206bf3a389b9bf05260d32eb796444df2c0dae636a790a731885886bf0bcc997f009e460f42dc2ac97d588"], 0x58}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000080)={{0x452c7b67ea138646, 0x0, @reserved="38f1035f65ecb5c333ce4c93fb35e0cb1d4d455782e924ff6419b336fd36bc50"}}) 06:09:16 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000}) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000140)=0xe82, 0x4) 06:09:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xd4080000) 06:09:16 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x800, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/140) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) getsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 06:09:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xd5080000) [ 1486.024603][T18566] device batadv0 entered promiscuous mode [ 1486.067982][T18566] device batadv0 left promiscuous mode [ 1486.145145][T18604] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.0'. 06:09:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffffc3, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000000206010000000000000000000000000011000300686173683a00000100000000000000000900020073797a3100008fe0ba8c03e80fb500000500010007000000050001000700000005000400000000000500050002000000"], 0x54}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 06:09:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xdf000000) 06:09:17 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1486.419535][T18617] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1486.453682][T18617] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xe4ffffff) [ 1486.505134][T18621] device batadv0 entered promiscuous mode 06:09:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) r3 = socket(0x6000000000010, 0x3, 0xffffffff) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r5, 0x909, 0x0, 0x0, {{}, {}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x68, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000f703000229bd7000fddbdf2100000000070000002e2f66696c653000"], 0x20}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6f, 0x6f, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x1}}, @datasec={0xd, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x6, 0x80000001}, {0x4, 0xfffffaa3, 0x8f}, {0x1, 0x2, 0x8db}, {0x2, 0x0, 0x1}, {0x1, 0x8, 0x1000}, {0x1, 0x8001, 0x800}], "10b640"}]}, {0x0, [0x61, 0x5f, 0x30]}}, &(0x7f0000000140)=""/175, 0x8d, 0xaf}, 0x20) r6 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x492492492492778, 0x0) sendmmsg$alg(r6, &(0x7f0000002dc0)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000400)="e54c39a7aaca78f85667aa3da495125ba07d350a0d1b4bef37fc7ca6bff276adc35ec62e0ddaa32ffaf268c42457b3d96d2fc3cfc4b75b84fd899e3dbc36d78263f5c8b54ea8bf550894ae1fdb6a65a73d63984bc8daa5bd", 0x58}, {&(0x7f0000000480)="7c68af69666600fb2ccb5de33c826402036b0c79244059c911c9ebd8f05594566ffd98e77210112c38cfd61ff0c7e068be326b11b98291d11fdcfa32f2e97e6e176ed9f2689f1fc80bb6d3fd8034b3bd3c038539729efba8c9e11b222c54520f3d101d82e572c040aec25624062510e4c01328031a4868e3b63dfdf0a03da1abc959298fa80f453bc72241e7aaca1b9b72acb0755d6185a4458e0430543c2e678ceda03c52525af53909f54608036785fd1f3bdf39e697", 0xb7}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="215999685443182986b02be29e7d154d327c9c56d046e344fd9b7dfec3f380c26d6dac904bbffa923d9b7fc2fd5413c3f5bf944975af038d63ca6def55bc0d632c774a744626a65b2768a854cc65f865167aa74d015f0af78ad7e4925267bcccceb9adc6faf73773f74c40dc31980e72f2ed7e4ba34368649307e69fa2cc66e6d452342a8e6c432ed36ca323a6d12c26995c6e4f73bb0833eedc8c75184c5f453fad41eb5f60ef0feff4890d30f3daadf3eade44a11398a2f1d43719a157ec68f23a02a2c02167d93a270d504f9a8008bc8d40710a895a6dc40577cca9a530bd79ba6f6a38ae0346628b76", 0xeb}, {&(0x7f0000001640)="32a6d51a70756d4d9fa9a432214481c1db8356b5e28bda038b53714866bc7e9cad254248f9b5d72323b20514b30bcedab43c254f40a8b3c7a5ab09bc0fca3c3559f2ba71cb37ef1f4bff9f15eeb67805e59a19fc57d523a4f1b98079ed1076dedef19be1e3b32dcbab54e46978ddc2d6cf633715ef8b9abbb10485f9f7b5a84c63fb6b2ed6dcfa21f86e960156af", 0x8e}], 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"/440], 0x148, 0x24044015}, {0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001900)="c553b949ef49ef8471d09f971f649630c583aaf00d452efcf74b2a657317229563df1d877a24743ebecc60829f18ff55e2aaa2a2c78207092d95d9c84f8ae878aa0c436fc51eb5c72083db2be592840e1517303707d145575f69a6d83fa5819737f7aa8ef992f5647ead25fc45d3904ffa5a2e4aa04ef252d682c0fb2c2de6aa8e5e396d5ea695bb701b629649d620efe8ba3cd0bac65a24447972938c5609a254d95576fbbfb64f", 0xa8}, {&(0x7f0000000380)='~', 0x1}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="7fc56905609da180a5c3c9cba0922ed67955c990a5933623bf0cdc0ec506fba0bbe6909ffe8301ec1661b02d37c5adb47463f0f78e4b184a4f090186cb71e213c0e66178c256e62da8311fa1fb74506499badaeafce29fd4c254fc49a16c612410139236f0bc582d90bfe74ac66754e775b39807f67b7c47ec1f15888da6ccae1e54cc6e0e2951f2f9bf5e7d8c64f9a6e5e8587a606db489420adeb95344a7c914", 0xa1}, {&(0x7f0000002a80)="a2e9a96855ad70847d663342563b0468a20c777193e4ddc2c0067e8e60fa7e2d998448fe7daa5f74dd00b85e7974dc1f2763d94b6445ad7764e560757cfaa1e68873e55c96879016e4a555f651280a7dea1ceee0d562add1f61d467a2b8f00325fb06bb292b754d3f4c5423baecc3a8228b643231ab0e0ebb63365f8ff46cef9e8b801580bd08e835ca981728085856cfcae1e13a04dcb49f4837bbc42eb1fd656d54856b22ba8a7d55d9fca1b5f3a790c49f3", 0xb3}], 0x5, &(0x7f0000002bc0)=[@iv={0x20, 0x117, 0x2, 0x7, "7e51676a5798f1"}], 0x20, 0x40000}, {0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002c00)="68bdcfd12188807e16d8937fcad538ac5b0c5054923297b4db45df5ce043c4f2d90723ea158568cdefa3dba68524b208135da92d3693d57b1f1306510b61c8d83f2b6fe79f10bccefc4a89bfd47cd9db6e3c29975adcdab9f2035fc842aebf0e46923532a02867fbc8b3105f3fd5327dcda16fd9d60a3feed198dd243dca3c8c20004d24a60e05f9aa2224b16368f8a4556e15a91f1088c2145ee3ea", 0x9c}, {&(0x7f0000002cc0)="a7883da4ec7920bf7e380229e83984715bc32c33a3618b65f3d354b5ecaca3737e7d58930536c40089147a8cb1d3f601b2615fe60b46fd360437555ad1e446beb6d9d2b9b319bda649a096e70532d8cdfe1f8f85659a17aeca98ca1d80984b3554cabc33e73e845d1ef4121bfa1e25a491574e4d6ecfa48a6c947888c0b69083ed21bffc48e3de4b", 0x88}], 0x2, 0x0, 0x0, 0x88c0}], 0x3, 0x44000) [ 1486.568159][T18621] device batadv0 left promiscuous mode 06:09:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xf0ffffff) [ 1486.673886][T18619] netlink: 41399 bytes leftover after parsing attributes in process `syz-executor.0'. 06:09:17 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xa}) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x3d}, 0x1f, 0x1, 0x3, 0x2, 0x4c3f, 0x7}, 0x20) io_uring_enter(r0, 0x0, 0x98, 0x1, &(0x7f00000000c0), 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x202000, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000140), 0x4) [ 1486.728269][T18631] tipc: Enabling of bearer <:> rejected, illegal name 06:09:17 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1486.772525][T18631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xfdffffff) [ 1486.857368][T18631] tipc: Enabling of bearer <:> rejected, illegal name 06:09:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffffe4, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1486.911248][T18644] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.0'. 06:09:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x0, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x189}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a31000000000c0007800800066000000000050001000700000005000400000000000500050002000000"], 0x58}}, 0x0) 06:09:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xfffff000) [ 1487.047440][T18651] device batadv0 entered promiscuous mode [ 1487.137438][T18651] device batadv0 left promiscuous mode 06:09:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xffffff7f) 06:09:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xffffff97) 06:09:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xffffff9e) 06:09:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xffffffe4) 06:09:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) [ 1487.684339][T18672] device batadv0 entered promiscuous mode 06:09:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002600)='/dev/vsock\x00', 0x200080, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x6c, 0x1, 0x4, 0x0, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFULA_CFG_MODE={0xa, 0x2, {0xfffffff8, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8bc}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) [ 1487.766061][T18672] device batadv0 left promiscuous mode [ 1488.134476][T18672] device batadv0 entered promiscuous mode [ 1488.193884][T18672] device batadv0 left promiscuous mode 06:09:20 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x2) 06:09:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xfffffff0) 06:09:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x1}, 0x14}}, 0x4000) 06:09:20 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x95e) io_uring_enter(0xffffffffffffffff, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="34000000d1cfd99e93b4156026ea824de4073b61e56f9caf5476038f05d8c9d36f69cff77d3b78002175c8debe6e8d340de803a07d0cdd68cdf997fbd663b2aa31dccfb4b8ec0c11f38413acb5b8347b60a04067e426e10fa5d8281801959d8108f8b2e6f52a409312cdba6ce0ee690c2cc6b568e12c28ef1cd8bba5d5558bff24057feaa305b4f6cdcaef80a03a87cdf9b878f6cf5b671e810e0e46bab715a532513e661b8989", @ANYRES16, @ANYBLOB="100029bd7000fedbdf2503000000080000006a453b34c9f09ff7209a9cd5000008000100"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40010) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0xffffff56) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000fbdbdf25170000000a001a004050faff88b000000c009900010000000200000008000300", @ANYRES32=r4, @ANYBLOB="081384000100040000000a001a000180b50000030000"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000180)) r5 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x492492492492778, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r7, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0xcc, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff318}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x12359a8e}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x801}, 0x8000) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x1, 0x7, 0x6}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x3) 06:09:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffe, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:20 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0xe) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={r1, 0x0, r2}) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 06:09:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xfffffffd) [ 1489.955315][T18700] device batadv0 entered promiscuous mode 06:09:20 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1490.033621][T18700] device batadv0 left promiscuous mode 06:09:21 executing program 2: r0 = open(&(0x7f0000000540)='./file0\x00', 0x200, 0x131) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x480d1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060100000000000000683a6e65742c6e6574000000000913020057797a31000000000c0007800800060000000000050001000700000005000400000000000500050002000000"], 0x58}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000240)={'wg0\x00', 0x8}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x501080, 0x0) 06:09:21 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tgkill(0x0, 0x0, 0x1) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x121000, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000080)={&(0x7f0000000000)=""/116, 0x74}) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:21 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x2) [ 1490.115076][T18721] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1490.143776][T18705] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.0'. 06:09:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x1000000000) [ 1490.176367][T18721] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a31000000000c0007800800064000737160ca000100070000000500040000000000050005000200000004f2d43a8eaa5788b210f6d2a5ea24941cf30b6100f43d83bb2b36399217c7856578f5a8fd284d2b59135d5d5197c82fde5a81ce0db948c29446ce30db7719b7603a5ded97fd4849c9985e8cff70b535c4ed84cc0a4e3f9b3dedc8d79e8f472357bdfac3c7e536fde04d44fc353acf88"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 06:09:21 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x1f, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:21 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x2) [ 1490.276367][T18734] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1490.355839][T18741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1490.545883][T18746] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.0'. 06:09:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:21 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x9, r1, 0x400000000, 0x8) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) 06:09:21 executing program 2: io_setup(0x5f, &(0x7f00000000c0)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0xa0846, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x20000005002}) socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000180)="d68bbf395ce887f21e61beb59dedd2777147c7801e49a14ba88caeb69cc30a1c742f96539da90298830ca05944b806d3c7df7b27a865eefc0840fc86f47c3190f4035464523bf118107070d2e64f5d6a830d7946df78ab1cfeb84959ed49e681d15e334f3f0366d0580da79298650b2792cef167fa8cc02567cd089b171a6a516ea3ffa3a6f8b2dd3fd9e3e08ebbbb49b560379e90a3", 0xbd, 0xfffffffffffff544, 0x0, 0x1, r1}]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:09:21 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x2088ffffffff) [ 1490.834215][T18757] device batadv0 entered promiscuous mode 06:09:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x1000000000000) 06:09:21 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x8) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0xe) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) [ 1490.900039][T18757] device batadv0 left promiscuous mode 06:09:21 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:21 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x4, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000)=0x5, 0x8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sched_getaffinity(r0, 0x8, &(0x7f0000000100)) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1490.967916][T18772] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1490.995543][T18758] netlink: 41399 bytes leftover after parsing attributes in process `syz-executor.0'. 06:09:22 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@sco, &(0x7f00000000c0)=0x80, 0x800) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002dbd7000fcdbdf2503000000100004213defc75aaa43657c00e5502164c7a7dcb7c4cf0100000000010000075f5c0700000314d75828a0f61a963436a132bcf7120047b30bbe223c164d6bd8fa9792040000008c2784713f0727d46451fcac3fec61904c731c809f88051a70efa2b1e1d2c74a254dac5f3845a0216e3357"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4018000) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)="d3bae4866f1216d2aa7f2290db", 0xd) 06:09:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1491.278260][T18785] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.0'. 06:09:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000000c0)={0x8, [0x7, 0x6, 0x27, 0xaf, 0x4cd, 0x3, 0x8, 0x6297]}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.u'}, 0x15) [ 1491.368401][T18801] netlink: 41399 bytes leftover after parsing attributes in process `syz-executor.0'. 06:09:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0xf, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x2000000000000) 06:09:22 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) wait4(r2, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:22 executing program 4: getpid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="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", 0x14c}], 0x4, 0x8) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', r4}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000002400)={@rand_addr="2768fb919c92e5179ecad1998216a045", 0x7d, r5}) [ 1491.566550][T18812] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x10, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:22 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x40, 0x30}, 0xc) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r0}) ptrace$setregs(0xf, r1, 0x3, &(0x7f0000000080)) r3 = socket(0x6000000000010, 0x3, 0x0) getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) sync_file_range(r3, 0x7bb2, 0x0, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) [ 1491.710908][T18827] ptrace attach of "/root/syz-executor.4"[18826] was attempted by "/root/syz-executor.4"[18827] 06:09:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x25, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1491.811038][T18821] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.0'. 06:09:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1491.865092][T18838] ptrace attach of "/root/syz-executor.4"[18833] was attempted by "/root/syz-executor.4"[18838] [ 1491.877958][T18839] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1491.917778][T18812] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:23 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 06:09:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0xc0, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) 06:09:23 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x60000000000000) 06:09:23 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x10040, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="142065dfb544a38a6cb11b21150298a9f6304b00d0a44efc25377be6127f7335de471348b4ee9c6cda6b5cc5729e7338037c6d3cf9e7d6190469d056fcb64f128269dcbd3a29f35f2134c9151c75b0da93f5c7f97f641834a1657c49f92b765f8ae941525de78dd60452fcc795afbcf4850ed64a5878e9ed9dac44f15fe51c62fd6f2379fd0ecf9b6cc00784a72e237abf310b03c02a260b75537e5c95e190ecda023b3ae3af979a9d2daae4fb1a6b57c7c3fc82429bf2d2c986b0f2bf79a4f01b6bf8898d0211438c38909c8b", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00000000000000770100000004002a00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x8000) 06:09:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0xec0, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:23 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1492.397469][T18867] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x33fe0, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:23 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="b7", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x2, 0x0) r6 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r7 = semget(0x3, 0x2, 0x620) semctl$GETPID(r7, 0x4, 0xb, &(0x7f0000000380)=""/4096) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000040)=[0x7f, 0xb87b, 0x3, 0x401, 0x7ff, 0x7, 0xa1e]) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) set_thread_area(&(0x7f0000000000)={0x80000000, 0x20000000, 0x4000, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1}) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) 06:09:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a31000000000c00078008000640000000000500010007000000050004000000f91319d87ce13a000005"], 0x58}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x40, 0x0) syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x1, 0x10000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000880)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000240)={0x1, 0x0, {0x5, 0x5, 0x2, 0x4}}) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r7, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x10, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x4000000) 06:09:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x100000, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:23 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x200002c8, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xd0010000000000) 06:09:23 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="b893e5ff30c2db56e76811889b063c591bd9028f3ac9da844dd0d0ed365377770953aea3883d0fb8641a935a", 0x2c}, {&(0x7f0000000040)="69ddbd540556aa280055d64dfc1c0a709b916adfa7dba0ecbd8a9af051dde1a10e8e5d1ff00380d4076dd6635baa18e5498489639131f50607745cfa57b3684d37df0fa5fc581953f35bb2b2d3041763a7575ab6baa154be4bfbf5ff71e8e2a72ac2365af8ff3a45c9", 0x69}], 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000180)=""/242) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000059c72c1224f9f2d41d47df4c157600aa3401b3f7ce625e48aff63ef5d58e1388504adca079c246ec3b710b5120d3ec7832eba51e25a92f9792579dd6908188af3c2e37997ee81cc56ce0adfa60d0582256c122279ee217f3fa69895c8880d6a3d8b921d86b560a0f66e461b7971b7c67bd894f505ffdc6b456ec0bcc855475ab5fd97be2b91cd062244031e9d6777fdd700faee0e1fec4b5c052fd12e3a33fc39704e97dc4bc6d5573dab8194394778fe0d8e33e2fbd8c2ace4992d9fcae36b1dc3a228a65bb85450bdbaa45ec5aa6f6d512", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESHEX], @ANYRESOCT, @ANYRESHEX=r3]], &(0x7f0000000080)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x2, 0x6, 0x1000, 0x2, 0x5, 0x0, 0x0, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x400, 0x400, 0x8, 0xffffffff, 0xffffffff}}, &(0x7f0000000100)=0xb0) ptrace$setregs(0xc, 0x0, 0x0, &(0x7f0000000280)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:23 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000780)={0x0, 0x0, 0x0, 0xfffffffe, 0xd6}) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x4, 0x510, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000100), &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, 0x58f) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000700)='trusted.overlay.nlink\x00', &(0x7f0000000740)={'L+', 0x101}, 0x16, 0x0) 06:09:24 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1493.049005][T18918] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x7ffff000, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x2, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x3, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x308, r1, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x62, 0xffffffffffffffff}}, @NL80211_ATTR_BEACON_HEAD={0x2e7, 0xe, "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"}]}, 0x308}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6ed783e9eceac9bad1020073797a31000000000c0007800800064000000000050001000700000005000400000000000500050002000000"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0) 06:09:24 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x4, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xf0ffffffffffff) 06:09:24 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x100000000000000) [ 1493.809793][T18965] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:26 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x222c02) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff000) fstat(r2, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)=@v3={0x3000000, [{0x4}, {0x0, 0xfffd}]}, 0x18, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r5, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2, 0x0, 0xfffffffffffffca4, 0x0, 0xfffffffffffffe36}, 0x40000c0) ptrace$setopts(0x4206, r6, 0x0, 0x0) 06:09:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x5, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x101002) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x302, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000012}, 0x40) 06:09:26 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) r3 = gettid() ptrace$cont(0x18, r3, 0x0, 0x2) ptrace$setregs(0xf, r3, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:26 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x53, 0x1, &(0x7f00000000c0)={[0x796c]}, 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x9, 0x8e6b, 0x3, 0x1c0, r1, 0x5679, [], r5, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) 06:09:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x200000000000000) [ 1496.046851][T18986] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1496.064540][T18987] __nla_validate_parse: 9 callbacks suppressed [ 1496.064550][T18987] netlink: 41399 bytes leftover after parsing attributes in process `syz-executor.0'. 06:09:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x6, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x7, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:27 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x8, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1496.394827][T19009] device batadv0 entered promiscuous mode 06:09:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x9, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1496.446690][T19009] device batadv0 left promiscuous mode 06:09:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0xa, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1496.552509][T19016] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1496.584589][T18986] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:30 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0xb, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x300000000000000) 06:09:30 executing program 2: timerfd_create(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1}}, 0x5e0bc46c0526cca5) prctl$PR_SET_FP_MODE(0x2d, 0x1) 06:09:30 executing program 5: io_uring_enter(0xffffffffffffffff, 0xfffffffa, 0x3f, 0x1, &(0x7f0000000000), 0x8) 06:09:30 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:30 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000380), 0x0, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28001, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="0010dad6a7afee4350d7291fb6029dd9c912", @ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYPTR64], &(0x7f0000000080)=0x5) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r4, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={r4, @in={{0x2, 0x4e21, @loopback}}, 0x80, 0x1f, 0x8, 0x10001, 0x1, 0x5, 0xfa}, &(0x7f0000000100)=0x9c) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:09:30 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1499.370143][T19054] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:30 executing program 5: r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000180)=0x10) io_uring_setup(0x69, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x224}) getresgid(&(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000140)) 06:09:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0504000000400000005f02000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x80) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:09:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0xc, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:30 executing program 4: r0 = getpid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 06:09:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0xd, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:30 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) tee(r2, r3, 0x81, 0x5) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x400000000000000) 06:09:30 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:30 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r2) ptrace$cont(0x7, r2, 0x0, 0x0) wait4(r2, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0xe, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x120, 0x6, 0xa, 0x900, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xa1, 0x7, 0x1, 0x0, "0d04a40f5d21d72ecc218619fa342cc7f671eb085cd2323ecf54f3bd5f108bcf1ef9f19cd43deb1cbf4498f648201f51d57d0ef00ab5fed0103fec7208831d7fcd5d422989b6bae815dc6745dd6e0c8e2a1daa0d6b6a6cad9f3271e6b7a98664d95f064acde18cc1b12843c18f66e7d11f0340720181347475d4dac91afe3aea7b0a85fa75077c181be5df2a8409468ce31d08aa1e95becb7a4f932756"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8863}]}, @NFTA_RULE_USERDATA={0x31, 0x7, 0x1, 0x0, "4470a7c697ff4f8d03aa7438b58f76e62bbbf82b6cda7b2f39d29a5bd61f8e33816ed44387ae7429302b927f99"}]}, @NFT_MSG_DELSET={0x80, 0xb, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x6b}, @NFTA_SET_DESC={0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_USERDATA={0x40, 0xd, 0x1, 0x0, "4f4ed5c6e943f29b2c4d91e640c5fa227851b22ca5f940cc0248a8d969cebd2e9e01e2fa60d56007de8dd520330b8379ad1886d241f3473ba5de64b6"}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x901, 0x0, 0x0, {0x4, 0x0, 0x7}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x301, 0x0, 0x0, {0x9, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x24}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}], {0x14}}, 0x258}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:09:31 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:31 executing program 4: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x53, 0x1, &(0x7f00000000c0)={[0x796c]}, 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x9, 0x8e6b, 0x3, 0x1c0, r1, 0x5679, [], r5, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) [ 1500.073974][T19103] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0xf, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:31 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x2}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x10000) syz_open_procfs(r2, &(0x7f0000000000)='net/icmp6\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2b0500000000738e967961ea197bb7303d1d898e0ea2000069"], 0x19) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xb) io_uring_enter(r0, 0xfffffffe, 0x1, 0x2, &(0x7f0000000100)={[0x200000c]}, 0x8) 06:09:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x11, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:31 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:31 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x500000000000000) 06:09:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) read$rfkill(r1, &(0x7f0000000080), 0x8) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000140)={@rand_addr, @multicast2}, &(0x7f0000000180)=0x8) 06:09:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x12, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:31 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1500.993977][T19153] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x14, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:32 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="b893e5ff30c2db56e76811889b063c591bd9028f3ac9da844dd0d0ed365377770953aea3883d0fb8641a935a", 0x2c}, {&(0x7f0000000040)="69ddbd540556aa280055d64dfc1c0a709b916adfa7dba0ecbd8a9af051dde1a10e8e5d1ff00380d4076dd6635baa18e5498489639131f50607745cfa57b3684d37df0fa5fc581953f35bb2b2d3041763a7575ab6baa154be4bfbf5ff71e8e2a72ac2365af8ff3a45c9", 0x69}], 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000180)=""/242) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000059c72c1224f9f2d41d47df4c157600aa3401b3f7ce625e48aff63ef5d58e1388504adca079c246ec3b710b5120d3ec7832eba51e25a92f9792579dd6908188af3c2e37997ee81cc56ce0adfa60d0582256c122279ee217f3fa69895c8880d6a3d8b921d86b560a0f66e461b7971b7c67bd894f505ffdc6b456ec0bcc855475ab5fd97be2b91cd062244031e9d6777fdd700faee0e1fec4b5c052fd12e3a33fc39704e97dc4bc6d5573dab8194394778fe0d8e33e2fbd8c2ace4992d9fcae36b1dc3a228a65bb85450bdbaa45ec5aa6f6d512", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESHEX], @ANYRESOCT, @ANYRESHEX=r3]], &(0x7f0000000080)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x2, 0x6, 0x1000, 0x2, 0x5, 0x0, 0x0, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x400, 0x400, 0x8, 0xffffffff, 0xffffffff}}, &(0x7f0000000100)=0xb0) ptrace$setregs(0xc, 0x0, 0x0, &(0x7f0000000280)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x25, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:32 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x2f, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:32 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x600000000000000) 06:09:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x4a, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1501.557583][T19184] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:32 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28001, 0x0) r5 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={r6, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={r6, 0x7}, 0x8) 06:09:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x73, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:32 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x7c7, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:35 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="b893e5ff30c2db56e76811889b063c591bd9028f3ac9da844dd0d0ed365377770953aea3883d0fb8641a935a", 0x2c}, {&(0x7f0000000040)="69ddbd540556aa280055d64dfc1c0a709b916adfa7dba0ecbd8a9af051dde1a10e8e5d1ff00380d4076dd6635baa18e5498489639131f50607745cfa57b3684d37df0fa5fc581953f35bb2b2d3041763a7575ab6baa154be4bfbf5ff71e8e2a72ac2365af8ff3a45c9", 0x69}], 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000180)=""/242) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000059c72c1224f9f2d41d47df4c157600aa3401b3f7ce625e48aff63ef5d58e1388504adca079c246ec3b710b5120d3ec7832eba51e25a92f9792579dd6908188af3c2e37997ee81cc56ce0adfa60d0582256c122279ee217f3fa69895c8880d6a3d8b921d86b560a0f66e461b7971b7c67bd894f505ffdc6b456ec0bcc855475ab5fd97be2b91cd062244031e9d6777fdd700faee0e1fec4b5c052fd12e3a33fc39704e97dc4bc6d5573dab8194394778fe0d8e33e2fbd8c2ace4992d9fcae36b1dc3a228a65bb85450bdbaa45ec5aa6f6d512", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESHEX], @ANYRESOCT, @ANYRESHEX=r3]], &(0x7f0000000080)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x2, 0x6, 0x1000, 0x2, 0x5, 0x0, 0x0, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x400, 0x400, 0x8, 0xffffffff, 0xffffffff}}, &(0x7f0000000100)=0xb0) ptrace$setregs(0xc, 0x0, 0x0, &(0x7f0000000280)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:35 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x700000000000000) 06:09:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e657400001adfffc4020073797a31000000000c0007800800064000000000050001000700001005000400000000000500050002000000"], 0x58}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, r3, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) 06:09:35 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1504.235301][T19216] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1504.249117][T19219] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff02, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:35 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1504.683632][T19241] device batadv0 entered promiscuous mode [ 1504.764641][T19241] device batadv0 left promiscuous mode [ 1504.870700][T19216] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:35 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x800000000000000) 06:09:35 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1505.018520][T19255] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:38 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="b893e5ff30c2db56e76811889b063c591bd9028f3ac9da844dd0d0ed365377770953aea3883d0fb8641a935a", 0x2c}, {&(0x7f0000000040)="69ddbd540556aa280055d64dfc1c0a709b916adfa7dba0ecbd8a9af051dde1a10e8e5d1ff00380d4076dd6635baa18e5498489639131f50607745cfa57b3684d37df0fa5fc581953f35bb2b2d3041763a7575ab6baa154be4bfbf5ff71e8e2a72ac2365af8ff3a45c9", 0x69}], 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000180)=""/242) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000059c72c1224f9f2d41d47df4c157600aa3401b3f7ce625e48aff63ef5d58e1388504adca079c246ec3b710b5120d3ec7832eba51e25a92f9792579dd6908188af3c2e37997ee81cc56ce0adfa60d0582256c122279ee217f3fa69895c8880d6a3d8b921d86b560a0f66e461b7971b7c67bd894f505ffdc6b456ec0bcc855475ab5fd97be2b91cd062244031e9d6777fdd700faee0e1fec4b5c052fd12e3a33fc39704e97dc4bc6d5573dab8194394778fe0d8e33e2fbd8c2ace4992d9fcae36b1dc3a228a65bb85450bdbaa45ec5aa6f6d512", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESHEX], @ANYRESOCT, @ANYRESHEX=r3]], &(0x7f0000000080)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x2, 0x6, 0x1000, 0x2, 0x5, 0x0, 0x0, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x400, 0x400, 0x8, 0xffffffff, 0xffffffff}}, &(0x7f0000000100)=0xb0) ptrace$setregs(0xc, 0x0, 0x0, &(0x7f0000000280)) ptrace$cont(0x20, r1, 0x0, 0x0) 06:09:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff04, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x4c}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r3, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x2c}}, 0x8a89d750f8fa6b42) 06:09:38 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x900000000000000) 06:09:38 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x885) 06:09:38 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1507.305362][T19271] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:38 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1507.685855][T19294] device batadv0 entered promiscuous mode [ 1507.754312][T19294] device batadv0 left promiscuous mode 06:09:38 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:38 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1507.855632][T19279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xa00000000000000) [ 1507.983490][T19311] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1508.195927][T19294] device batadv0 entered promiscuous mode [ 1508.265615][T19294] device batadv0 left promiscuous mode 06:09:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x2000000000000) 06:09:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a31000000000c0007800800064000000000050001000700000018144ee892e70500040000000000050005e501000000acb1d3f837055a23b8b22ef7fb41ef38a5c73321ac0ea6e303aabc2a909e56eb6cd2b2f50acfef8cfe3e7afce72bca5c0fa260cc6374ceaeed5fafed227313568f3e14cda8667dc43838d825bc3cfcae2db718d2ca5191662558d4f2c46514b689bc4cb91c67e787aa30e35a80740e154ffb6a9326bd2d3f2d1ff303c54a643d416219892c2551fe35e780d69061"], 0x58}}, 0x0) 06:09:41 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:41 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x100) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0x9, [0x3, 0xfffc, 0x2, 0x1, 0x7f, 0x1f, 0x2, 0x8, 0x9]}, 0x16) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) dup2(r0, r2) 06:09:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xb00000000000000) 06:09:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff06, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1510.344864][T19332] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1510.360962][T19334] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:41 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:41 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x81, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000200)=0x14, 0x4) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x1, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x84800) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000001c0)=[0x2, 0x2], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000800000000000000090000000011000300686173683a6e65742c6e6574000000001200020073797a31010000000c0007800800064000000000050001000700000005000400000000000500050002000000"], 0x58}}, 0x0) 06:09:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) close(r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000080)="c9f17541a6f1d9c9d3f9d690ed43de0d2bb7518221618a1a5c5dc63812877ae80ddad0a5200141aa3ee00b94a23e90e1a74262a5d5b9047e457060831b637db6693b3ce4382f98ebae163d94e2f1335f4555140cd76fffb3a3b31d057dc73276c20b5216d9892630ef44ea5dbabf9c4a80743d69267911ce2d15c1448eed3460c8a47b252430863f489287ac5f1b367a80bf51dd2b0e38", &(0x7f0000000140)=""/45}, 0x20) [ 1510.751238][T19352] device batadv0 entered promiscuous mode [ 1510.803626][T19352] device batadv0 left promiscuous mode 06:09:41 executing program 0: getpid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1510.887456][T19342] netlink: 'syz-executor.4': attribute type 9 has an invalid length. 06:09:42 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1511.151158][T19334] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0xa00000000000000}, 0x0) 06:09:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff08, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:42 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x1]}, &(0x7f0000000100), 0x8) [ 1511.532566][T19395] device batadv0 entered promiscuous mode [ 1511.612547][T19395] device batadv0 left promiscuous mode 06:09:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xc00000000000000) 06:09:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff08, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:42 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:42 executing program 4: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x100) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0x9, [0x3, 0xfffc, 0x2, 0x1, 0x7f, 0x1f, 0x2, 0x8, 0x9]}, 0x16) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) dup2(r0, r2) [ 1511.859389][T19415] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1512.264098][T19395] device batadv0 entered promiscuous mode [ 1512.332773][T19395] device batadv0 left promiscuous mode [ 1512.441938][T19415] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:43 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x10005, 0xe) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)=0x5) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000100)={0x30fb5b6000c3e8b0, 0x4000, 0x6, 0x6, 0x9}) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x4, 0x3, 0x1}) 06:09:43 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff0a, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:43 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:09:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0xe00000000000000) 06:09:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1513.033763][T19462] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1513.330051][T19467] device batadv0 entered promiscuous mode [ 1513.405816][T19467] device batadv0 left promiscuous mode 06:09:44 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r3, @ANYBLOB="0800d188", @ANYRES32=r5, @ANYBLOB="0500030000000000"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@remote, 0x3d, r5}) 06:09:44 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x1f00000000000000) 06:09:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff0c, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1513.717041][T19491] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff0d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:45 executing program 5: r0 = io_uring_setup(0x9e4, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x8000004}) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:09:45 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x7) [ 1514.303382][T19502] device batadv0 entered promiscuous mode [ 1514.380362][T19502] device batadv0 left promiscuous mode 06:09:45 executing program 5: r0 = io_uring_setup(0x17f, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:09:45 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1514.782314][T19502] device batadv0 entered promiscuous mode [ 1514.877352][T19502] device batadv0 left promiscuous mode 06:09:46 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:09:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x2000000000000000) 06:09:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:47 executing program 5: r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fddbdf25000000000c00990002000000040000000c009900980a0000000000000a000600bbbbbbbbbbbb0000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000100)={0x8000, "66fa86829ee94ce447b5c61ef13b990a3037010dcf8af153797708b0aefceb12", 0x3, 0x3, 0x80000001, 0xb000, 0x6}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_batadv\x00'}, 0x18) r3 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r3, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000180)) 06:09:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff0e, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1516.088120][T19547] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff10, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff11, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1516.552227][T19571] device batadv0 entered promiscuous mode [ 1516.633655][T19571] device batadv0 left promiscuous mode 06:09:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1516.756080][T19547] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:48 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "dc51d75410a6c5d0", "c331ffa42ae1a2c82d51eb0cf4ca08ad", "c1d0cb85", "744e53be6ef82bde"}, 0x28) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:09:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:49 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002abd700109dbdf25050000000c000280080001000900000029b33a675f5c6b854bb5a106b22ac131c67a807a7db970ef9e8411d64a00772fac2f17c4a31ade7fb67c3ceffb48360e1f5a5e798a6fb6d940c70ce7e0433880fda9ce9c135683975f0a92602044c29bd4dae595f1ca8a6399c335a4eb4e346cda26f36fb1f8ec3b4f8ce0c41bc0839f047a0d29d5fa974e9acff28657ac93ea6599424b722c1b890dc390fde4cd082c503aed33a1fdca7e4786e2552d6b7305f9c8f3531888d97a622cc13033dd723ae4377a77fcfba0e934c982f36b732ca83b674bc35bcf0b000000001ce6adc464b30d525dfa963975bd4321f3a50edc680976a0820740e583dd7e082533a5ddb1981457ad847e1e9efc53aba1a72f543907e50b6d"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:09:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff12, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:49 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x3000000000000000) 06:09:49 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000004800)={'batadv_slave_1\x00', r1}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r9 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r9, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000004dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20804}, 0xc, &(0x7f0000004d80)={&(0x7f0000004840)={0x520, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x652f089b}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x52c72617}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}]}}]}, 0x520}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000206010000000000000000000000000011000300686173683a6e310800002300000000000900020073797a310000000004000780050001000700000005000400000000000500050002000000", @ANYRESOCT], 0x2}}, 0x20008015) 06:09:50 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4d180930a06000000a843089100fe800400020008000a0000dc13382d0007009b7a136ef75afbc9bff7de5cf25fa8e183f5448daa72540d8102d2c55327c43ab82286ef1fdd206523", 0x55}], 0x1}, 0x0) r1 = io_uring_setup(0x65, &(0x7f0000000040)={0x0, 0x0, 0x2}) io_uring_enter(r1, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) [ 1519.077661][T19614] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:50 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28001, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r4, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r4, @in={{0x2, 0x4e24, @local}}}, 0x84) [ 1519.143074][T19618] device batadv0 entered promiscuous mode 06:09:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff25, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1519.211390][T19618] device batadv0 left promiscuous mode 06:09:50 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1519.602234][T19629] device batadv0 entered promiscuous mode [ 1519.663175][T19629] device batadv0 left promiscuous mode [ 1519.883502][T19638] device batadv0 entered promiscuous mode [ 1519.951352][T19638] device batadv0 left promiscuous mode [ 1519.985497][ T0] NOHZ: local_softirq_pending 08 06:09:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x3f00000000000000) [ 1520.093663][T19658] device batadv0 entered promiscuous mode [ 1520.165702][T19658] device batadv0 left promiscuous mode [ 1520.206461][T19678] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:53 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$cont(0x20, r5, 0x0, 0x0) 06:09:53 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x103080) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf2501000000080005000000000814000200969833c0c3ea5000a87e05cc1f3c14560500010001000000130007002f7573722f7362696e2f6e098b43f3fcb64b840073797374656d5f753a6f626a6563745f723a73797374656d645f756e69745f66696c655f743a733000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000015) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x303, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:audit_spool_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9c15e1e4c42c679f}, 0x4000800) 06:09:53 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000912f10000000000000000686173683a6e65742c6e6574000020000000020073797a31000000000c0007800800064000000000050001000700000005000400000000000500050002"], 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='\x00'}, 0x10) 06:09:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x4000000000000000) [ 1522.145444][T19696] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1522.179303][T19701] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1522.183526][T19696] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f0000000340)={'U+', 0x1}, 0x16, 0x1) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000100)={0x7fffffff, {{0xa, 0x4e24, 0xe7, @local, 0x401}}, {{0xa, 0x4e20, 0x401, @loopback, 0x400}}}, 0x108) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000080)={0x18}) [ 1522.245051][T19697] device batadv0 entered promiscuous mode [ 1522.322979][T19697] device batadv0 left promiscuous mode [ 1522.344283][T19720] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:53 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000140)={0x81, 0x7ca, 0x41e, 0x7, 0x4, 0x1ff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xa00000, 0x3, 0x6, r2, 0x0, &(0x7f0000000080)={0x9b0902, 0xfff, [], @ptr=0x3}}) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x7, 0xa, 0x2, "f89e9e8667b9c688eab0e37e8f05ae51103a09ac3468ca93078561f7f6dd5bfe", 0x32315241}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 1522.375661][T19720] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:53 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:53 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049", 0xe, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1522.702350][T19697] device batadv0 entered promiscuous mode [ 1522.751956][T19697] device batadv0 left promiscuous mode 06:09:53 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049", 0xe, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1522.888048][T19701] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049", 0xe, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:56 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002abd700109dbdf25050000000c000280080001000900000029b33a675f5c6b854bb5a106b22ac131c67a807a7db970ef9e8411d64a00772fac2f17c4a31ade7fb67c3ceffb48360e1f5a5e798a6fb6d940c70ce7e0433880fda9ce9c135683975f0a92602044c29bd4dae595f1ca8a6399c335a4eb4e346cda26f36fb1f8ec3b4f8ce0c41bc0839f047a0d29d5fa974e9acff28657ac93ea6599424b722c1b890dc390fde4cd082c503aed33a1fdca7e4786e2552d6b7305f9c8f3531888d97a622cc13033dd723ae4377a77fcfba0e934c982f36b732ca83b674bc35bcf0b000000001ce6adc464b30d525dfa963975bd4321f3a50edc680976a0820740e583dd7e082533a5ddb1981457ad847e1e9efc53aba1a72f543907e50b6d"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$cont(0x20, r5, 0x0, 0x0) 06:09:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x4800000000000000) 06:09:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:56 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a0008", 0x15, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:56 executing program 5: r0 = io_uring_setup(0xad6, &(0x7f0000000040)={0x0, 0x0, 0x13, 0x2}) io_uring_enter(r0, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x20, 0x4) pkey_alloc(0x0, 0x2) 06:09:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x60}}, 0x0) 06:09:56 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a0008", 0x15, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1525.254102][T19767] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:09:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000080)=0x1, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) [ 1525.306648][T19766] device batadv0 entered promiscuous mode [ 1525.374455][T19766] device batadv0 left promiscuous mode 06:09:56 executing program 2: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000023000011000300686173683a6574000000000900020073797a31000000000c00078008000640000000000500010007000000050004000000000005000100070000000000000000"], 0x58}}, 0x0) 06:09:56 executing program 5: r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000340)="d008a5b123aca83b3a56690e3d919bb682e39c7bb11c9df1ff0a092df7f2d299ce93b25ae0099c135fba9855d14547d992e7c5053566aaad853e21ddbf747c094d7f8b9cfed44491366efa62c76f110f9e5bff39236458d0550a981200fa53a60fcc4146f5aa96f55138c6b32f63ea778d565222026e7e119810eae8d32c4a1e5d56ea0fd291b6a8cbdda25b9563db1fb668be54c2261723c0b079fcaf79d85f4db9f4d36ac2e509be956cc351ef75021e4c7e4230d3c2251602bfe74e5d3172c8322238250f046d5e9d44f66ddb0b79abe70296ff1672ca3c2924391f181e11a58ffca3878944e7d73484076a6934bf370b0e38fb9e8e586a08ef814589828302569b508ce129a57d73dca600e6b712ec4aad59eeed90939e8b92be43f01b0c524cbe0cfd8910b115aee3761458c0575b98da51961d42a0644ab020b5519899b84c52b4a6067e50ff7599ea081e3fe16b73aeebeae6eb76349bc15317a4179e3ae0b92a251ad099a40097a6b85ace389350a9bf2883d4235c836ed5b7e8b22ca21c9f869ba3444469314e831de556e6989d131d1346fdaa0ef65696a86048a6c27274f426b13bcdab9d5aaa4c0dcc957a4776b553f9add9f864a9c732f44c7feefc3d5bcec4db3659eefb363f72addb51a671d01d2f5ab92420bf9aa564b7154a053e8eefb4c6f7f9a3569b691259b59b33f040ffbef7109a06a671ba932e7611ac54039401e70f8956e81a34529e15ef30f428e7b3d7ebce8f85f046ff844c99de3a9ca240c2bae041c2da6b7d3c6a8a86c2d70ecaa2f2d0313dc3984842fcdae631a4c6dee235cbc766d11c06483027617f6d10ce0821dddc6210ba24df0fe91125d198922226cc9daafee4b25a9a82d65b6b46c20bd0a4ae2e8f988bf39ccc46aa8ac9c59734ddf4d83f1afec144136722d5ec4551c9828a0e0ef79aeea366233911f157d8331808581d05ba70e602c2ab97587f8190d744b05aa4a0b3dc62bc8d6c60eaeffe12be17d92a1d6cd9d6411e3fca4cd6744643d6cf638a900a313cb64362d4d72596c77b54fe80836d7d085901b406d787a873a005154271a66f90075b02e5c7b6a606caf86130954cc290ef84d65627fd12493d367766c4674811681937eb2136891385f2cb52792f349b7539b3140bfee3057be1f28a8fe2fa872a496152b179275439a82ccc077908e81f2d4354364d3ebb49ac5b9e894a86c3b10c4e39738694ba8263f77237cc59976b13bf2825c1b15f5cedefffbeace641e259f45673207f882543e759e24f35a69840a80c65fb7e8e148d90b3987a91651cc8db6b96513f1c75172d377c5a16140f23f8ddce0ccfda5b6fc21d59aac7bcecd0b2291926916fea69b573d8472c0b7bb6f0350d4b828094cec1dc4a0ef675c7b9e30e903fa595c6f4b4b97128a74459c98a5f7ee51bec5d24b5462646dff2fc80b2efd38325021ded13e2d7ecede5465b55b0bec01a50cdfdedadb08349ffebbe49b28d80eb0d7f7da92541160db9e1854891a5455648ad2a578267c334732964ed7a0c04a23aa1e4f34b3f2a16ebc7290758634b80cec6f33b5b4219265cebb32f2a64c0a426d57efef9b4797a7aeb99bf262541161aaac9637bbfd0ab94340d5481e306027339c76b2b6a4933a918f12397494352bc4bbd8b2955bc36674b5e1f8b4130c3e5603194d8e3c0db11d32c96e48c732da12d303c0d47656b3ce6a7b61a039baa79d83f221cb7db8123283392bdfabed4bffe83f4a90fa58dd796457b8769eb405abfafcd83215e75184bb4ff34d813cab4a4be8ea35cd74ce1564a21629397ee730a62df252c29088a8a55003380abc7d55dc28dc6be3aa87b52a64644afd07f3229f81a598786c4673fb60b1f26d4c4c2dde20839307253c3fd435a1fb73b0dd29cabaadaf0e5cc8e74de6bc502b478423fb62764f2aebb1d46c90fcf0e09524ac72724d1a705a916e0c20a56287709e15d4de4c361fc8ae3942385e15cae549b0d751bdcaaf36c20cde8215f7fc70c7d542b51fa0d65d05df27943d51171988b64788a93a35da455948eb256d880eb0d91bbd01e236a838d1d2165096b212eaf0524a373daa1fdd750a5d0dbdbb5fa0667c73fe0c99e1c637c1c8905de7946fa02e5dcd7f8444b25173e51e083e87a55e8506266fdb2c491e1261f958517303fcbd2f60afd73ec5c054e28ef6f637149e3cc8038cff4e5f45a3c7f195a111bb23f1235660deb46243142db549031511301ead465687dfc8c2122c49c5ecb698bb6919b7962d7b7ac8c87a3d805d2286bf651f2d121d0d7c90f27cd3f4927b695305298ff51e09401799c7acd8f29592048b4d4d555f00495d42a7497d71485885f067226da6eb66c68ddb52a27b2f602c564f882a0df669585bb622e642101ad624877912523509887fad2a62191405e7fa0d3cdacc9ba9009c4b917167ca7c08b90b585979ee56e26dd488a4b813cd878689f6244863531e4a427b4e2dd2933ced2f3aa2afd4735559fb4d349303592b78e0f32932fab968337ca931147ceda867d294626d9c397be780bac09b2b95d7007df3d7069afd304bb682b8b19dc4a8905e9371350170d27edf979d82ed0193634bc450c9bc2dc69adca443fd08c10c2ce6ef6c3de95474020569db0287f0e4a4535f851afb90df7aeea376ff34633cdd5771ffa295b611e0f5b4deb11fd1358be195739f95be6a8bfe0299e0e5b8218620e5b5b1a58444be0499b6b9cd6626b6740a2992d32b4afc3fd6c66348493ae703fe9676d6edb73f08064e2dc6440638aad6940e041976196c9e1af73dc0786a3717bd256df9b53131ae28e1f5e040d7054168221817a91abbea439a01c494e94454a55b0a703190604a67bee5b7e5f1fcd0110fb5a39af9875c544e2bb9a0b4121b29038844025368da213fc545f95569b4cb1a966e1b9248276ce3762be81137bbadf6e410079d59743e085204412c9e6b2d530b4932ab1f3d7f31e29d3ff120bb58957c0da1bba8e4d2dba25746125346ca88770766e60b6dbb5e0684be0404f336b3d0cbe5b1f9e599ae03d2aff4e0e4613e01eb69d9e29b55f06c33c268e2527427f1d8d288313715aef215c6dedc876d857a67a66107ca866d5278df407e1a27a50dabf3c539b023f8e9f7be5a04161b93f367d034130c98c98729593fc89fe49d4e2ba33dc64580a099424bb5a78c76cd7ebb4c5c7aaf2f613a8be0a80962e85388dea5746d6e5572fa2e2ae4716e52abc462cbe7c3468c87c9bbec6d6b1f2256093e233813f965784413a3adf0fce7c4ac98d05df4da31fbabddff04bdb33ea96178dbe01aecdf70a10da262175bf40159f25a4a08979210ab9ee16057410b01d650933de853c0829b1e0620f449fe435ee4411e54d9f94fb94abf18a6b5a456c1e2eef790cc08e6e3ed952c07ec09c1b11107ac44b2973762ac72fe98521972aee46a3971801e43020f970e2d331c2055c873af2c85341e600e42bdbe38b546e9fe79bbcad2dd1e6e372d229ff3252335ed16d268a0af686c16d515cbf3c8a15a0558c5e8f1bda89accb53ad53c3f8a5ba8a7a14050366668bac87cab6d4e1c51b37940f63158ecd7614264a222f5bb8ed3dad54b33c1adbc25052ee307e529898b91d3fe117452dbdfe487340f1d366f8f579fd63ef09348cc7deac5ae1255ce61ca020c1dcc37ebecb5045615d556b10a9387da6e86e14545e6f6b6bcb6fe718b92ca94704677d88190ee306840b0b5714a2a8a4ca1fc3c3bc2283c1d5d76876147a9e88619ce95b2a028dd61c04ac4dd85271f0dbf7f02dc0eccd7a5d2ede1b8ae511082caf93bb3d91159c5b524cbd18f8966f0b200d041f0c7b985d8983df7741c840f50d665b620960478c12c4e50d475298620e3931c3b2215c6b705ef2baf10c8024eb34b0c1bb5fa3d21ca9cb3ef3b614ee229ec5d25978d496431532e30e8e855ff388c3f89a4f418f2c8840814711b7c9ebb65a6a1b07ed9d80367829914856f2cbb957a8f0944feabd89169bfb4d096dafb7c350fbd2728ac6b5212cd1dd556df89d5848225774c7b91010abe44b12b8f06c3cc94be674e796e35667f00f62fd1710f603a585519688b514d63661111081023b4ef0bfd62be59fed8b96e13efb4f60fdfe9b31523e20a1f67bf3c842a81c59c94c75dec0c1b31b390cd9013ee8e508cb53e1628dbb72ce03c02a6f8a2a366981d24205264c78b855f1f77dd37734d1ee662f511a7c9377c7f15d8f68d4f1a2124cec74ba8cf831f2d487541227d14c12838431e2f986816f6c7e3d35f39b16fcdfaa41813afc0af06fd50cb7f81f429836b42daa979b9f9d6dd6d7e1c746f36ceed47ddb96fecb6fdb3ef53e88afce282c941b3a3fd0de07e5501c534d788d27a804afd0daff5edea2f98a69e4f65b8216fe4e956a2f81409c40d6e0bcd4834ae012d82b558dd448a5ba4761a085668062146e15d0a0832103bca34b7cd8da6149f1d604a42f206f32151778573d3e0184c230b1a992dd946688f9d04830db27dcabf613779a06be979bb5a50626db251991d73b162dc4c5728980e9adfc3a663abf4d2dfda28b8830697174f1a7be828fb649893257cfcdf7999c47f23af88e11eaf126f2e5098c4290e5f104be4ccc14dac291bf39450a4545772f0a17fe0dff51ff8f11d7a10b557e8769e48656538ef5469dd486ba23e8064417d8062362a4b24d8a331a7b16df3616cdef2da155754e1b09ed5ae3d9b72dd7584cc2e192db4ef087aa9ec398f9f1d0403e82284ee208a782ec83cb9cd2590e798b82bc2ddc8fd3e4d88061644f2ac636d344977ce430536858ddcd568fb672114c57e0d09c6a010b950618adb24b12951636308252dd40c1c22d45bb6b801f84280e008ffc5634ba775fb40a6544dd67c8e6882349331fbecc88aab2a2e2ae6d957263a470ff05bfd2f9832cb581ec7d00bdf33d0cc010e4b5b3b761be917b81f5f4e30d724f8c746fd1445a63d9d797965338f629423c2f4694dc857f0bd38d0d5e879842f39b8445db7252e44684601512e252ee61dfba02dfdb6236c408b1a04e072995941c92158cdcab1a66dabc4ca9f58991f5cdc91eaae16c746e9eebbe9140ee42ea09a8021f4db7610c3ffe2999d565160c31ea0d2b0d30173627c3dc547e08f92489e17ff7733a71de100698cd1af3e209396a7f771dcf3b260b8d7cc7b08550620be966234da89585f5fac11a7f0d64b8a441dc740dfdfdce9f600ea35dd88602ae1ac1200be8b4f6e9037a8391178d4aeb9ee9f8a0504b3c24993b4c306935225f754ba1d04f6cea434ff3fbf3c6b8df15d55f561a86e858cc6956db1f3c2ee2c4b513d522e977d50ad2bf33f667cfa20036074c65abe35daa20c8717a15a21f56b4c94c52732134b0d9b3e883a02a192fb1b109a0e5db642f315c50781c113c8edc5d8d670ccba738fa585fd097dfde1e4eeae559d444b6aecdf644370673821cc0af283624fd5960a2a90b5e55c8057cc8e1482992fdd93c491628a6d4b7159c42c2af3762ae9ea00c4a33a80dfe40c15d68391a5c40b6f5e80dbb2fbfa52f946c84fb8efc0552f3fabb1e1d26d46c6cf94449fd05d66ddd41bda2ad5a5c553f4edf9f0c07efce0fdde237f240e02e849b9e8cbcde41c26f758537b16da6602fc41e4b5def7a1172f8ddd2c9159a898ab75318f76006dffc90a6d4cb9030baeaabdb7703cdd2fbeee39f865e711a6fa486e258908e6a975a32e1c0c2f2bd035d7895bb57cbefc0c473065195c448c1dd223d74ff", 0x1000}], 0x1) r1 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) fstatfs(r2, &(0x7f0000000100)=""/204) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x10005, 0xe) read$usbmon(r3, &(0x7f0000000000)=""/27, 0x1b) [ 1525.681940][T19789] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1525.731063][T19791] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:56 executing program 2: r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000100)='wlan0+bdev-cpusetcpusetwlan0lo\x00', 0x1f, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x0) 06:09:56 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a0008", 0x15, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1525.881800][T19766] device batadv0 entered promiscuous mode [ 1525.961822][T19766] device batadv0 left promiscuous mode 06:09:59 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$cont(0x20, r5, 0x0, 0x0) 06:09:59 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000", 0x19, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:09:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x4c00000000000000) 06:09:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:59 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) 06:09:59 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$getregs(0x16, r1, 0x0, &(0x7f0000000100)=""/49) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) flistxattr(r2, &(0x7f0000000340)=""/4096, 0x1000) r3 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r3, 0x0, 0x3f, 0x1, &(0x7f00000000c0), 0x8) 06:09:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0xa, 0xa, 0x901, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x80000001}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x36}, @NFTA_SET_USERDATA={0x34, 0xd, 0x1, 0x0, "c93e0fef152a76682cf81741477c3b3aeb6916d7bb11aa59045411072521b4dfa5feea455e5e2f0639a8546897f12587"}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8011}, 0x4001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) [ 1528.295900][T19825] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1528.344021][T19824] device batadv0 entered promiscuous mode [ 1528.394919][T19824] device batadv0 left promiscuous mode 06:09:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011008e19f2bcf01cce76cf932ad9fb2613f733ea6e65742c6e6574000000000900020073797a31000000000c000780080006400000000005000104070000000500040000"], 0x58}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x406001, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) [ 1528.581888][T19851] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1528.603440][T19851] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:59 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @dev}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000100900020073797a31000000000c0007800800064000000000050001000700bb6891d060d01c0d0a8df429513574000005000400000000000500050002000000e88cde9a754484551c5fcec50e7680d339019bdd32ca12211937ba4c5d9362d0acd624b462e6"], 0x58}}, 0x0) 06:09:59 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000", 0x19, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1528.754351][T19854] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 06:09:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:09:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x6000000000000000) [ 1528.821092][T19859] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1528.922464][T19865] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1528.961497][T19866] device batadv0 entered promiscuous mode [ 1529.021462][T19866] device batadv0 left promiscuous mode [ 1529.361522][T19866] device batadv0 entered promiscuous mode [ 1529.421276][T19866] device batadv0 left promiscuous mode [ 1529.527402][T19865] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:10:02 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:10:02 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000", 0x19, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a31000000000c0107800800064000000009000001000700050005000400000000000500050002000080"], 0x58}}, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x14040) 06:10:02 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @dev}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000100900020073797a31000000000c0007800800064000000000050001000700bb6891d060d01c0d0a8df429513574000005000400000000000500050002000000e88cde9a754484551c5fcec50e7680d339019bdd32ca12211937ba4c5d9362d0acd624b462e6"], 0x58}}, 0x0) 06:10:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x6800000000000000) 06:10:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x5, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:02 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c0000000", 0x1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1531.419009][T19894] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1531.448301][T19895] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1531.492270][T19896] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1531.512531][T19895] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 06:10:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:10:02 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @dev}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000100900020073797a31000000000c0007800800064000000000050001000700bb6891d060d01c0d0a8df429513574000005000400000000000500050002000000e88cde9a754484551c5fcec50e7680d339019bdd32ca12211937ba4c5d9362d0acd624b462e6"], 0x58}}, 0x0) [ 1531.693883][T19911] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 06:10:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0x2, 0x0, 0xfffffffe, 0x2, 0x80}, 0x1000009, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x4000000000000, 0x200, 0x200000000000009, 0x100}) 06:10:02 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x4000000000000000) [ 1531.811332][T19897] device batadv0 entered promiscuous mode [ 1531.887848][T19897] device batadv0 left promiscuous mode 06:10:02 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c0000000", 0x1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1531.977742][T19922] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 1532.253410][T19897] device batadv0 entered promiscuous mode [ 1532.323390][T19897] device batadv0 left promiscuous mode [ 1532.410829][T19894] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:10:05 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:10:05 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000226010000000000000000000000000011000300686173683a6865742c6e6574000000000900020073797a31000000000c0007800800064000000000050001000700000005000400000000000500050002000000"], 0x58}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0xe) read$usbmon(r0, &(0x7f0000000080)=""/23, 0x17) 06:10:05 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c0000000", 0x1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:05 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) 06:10:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x6, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x6c00000000000000) [ 1534.528677][T19954] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1534.591275][T19957] device batadv0 entered promiscuous mode [ 1534.650725][T19957] device batadv0 left promiscuous mode 06:10:05 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:05 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1535.050667][T19957] device batadv0 entered promiscuous mode [ 1535.120334][T19957] device batadv0 left promiscuous mode 06:10:06 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e6574000000000500000000000000002452888386a7d728873e0000000c000780644491be9033b4080006400000000005000100070000"], 0x58}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffe00}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5284}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe6b}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x66}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4021) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) [ 1535.311206][T19954] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1535.439905][T19990] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1535.466325][T19990] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 06:10:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x40000000) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x5050c1) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x40) 06:10:06 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:08 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002abd700109dbdf25050000000c000280080001000900000029b33a675f5c6b854bb5a106b22ac131c67a807a7db970ef9e8411d64a00772fac2f17c4a31ade7fb67c3ceffb48360e1f5a5e798a6fb6d940c70ce7e0433880fda9ce9c135683975f0a92602044c29bd4dae595f1ca8a6399c335a4eb4e346cda26f36fb1f8ec3b4f8ce0c41bc0839f047a0d29d5fa974e9acff28657ac93ea6599424b722c1b890dc390fde4cd082c503aed33a1fdca7e4786e2552d6b7305f9c8f3531888d97a622cc13033dd723ae4377a77fcfba0e934c982f36b732ca83b674bc35bcf0b000000001ce6adc464b30d525dfa963975bd4321f3a50edc680976a0820740e583dd7e082533a5ddb1981457ad847e1e9efc53aba1a72f543907e50b6d"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:10:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x7, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:08 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x94, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xc35}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @loopback}}}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xcad}]}]}, 0x94}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0xe) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000000)={0x3, 0x20, 0x3, 0x1, 0x7fffffff}) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000140)={0x7}) 06:10:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x6d6a010000000000) 06:10:08 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) 06:10:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x7f) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000080)={@fixed={[], 0x12}, 0x1f, 0x2, 0x6}) [ 1537.671649][T20013] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1537.690914][T20007] device batadv0 entered promiscuous mode [ 1537.768878][T20007] device batadv0 left promiscuous mode 06:10:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = socket(0x2c, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x14c, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x33}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xfffffd53, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="b2cd02c657d743cda5d62deb04e923ae"}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x66e1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa96}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4d03}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x329e}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) 06:10:08 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:09 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="90000000", 0x4, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1538.130933][T20007] device batadv0 entered promiscuous mode [ 1538.191417][T20007] device batadv0 left promiscuous mode 06:10:09 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="90000000", 0x4, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1538.299225][T20013] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:10:09 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="90000000", 0x4, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:11 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:10:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x8, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060100000000000000000000000000e6000300686173683a6e65742c6e6574000000000900020073797a31000000000c000780080006400000000005000100070000000500040000000090426bd6f2ceaf0b6d617049663a706f72"], 0x60}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) ioctl$LOOP_CLR_FD(r1, 0x4c01) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28001, 0x0) r5 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={r6, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0xc5, 0x7, 0x208, 0x886, 0x2, 0x8, 0x7ff, 0x4, r6}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x8001, 0x9}, 0x8) 06:10:11 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000002000", 0x6, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x6e6a010000000000) 06:10:11 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) [ 1540.744822][T20062] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1540.752072][T20064] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1540.842633][T20066] device batadv0 entered promiscuous mode [ 1540.871512][T20064] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1540.913544][T20066] device batadv0 left promiscuous mode 06:10:11 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000002000", 0x6, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:12 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000002000", 0x6, 0x800, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:12 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x9, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x6f6a010000000000) 06:10:12 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1541.460851][T20099] device batadv0 entered promiscuous mode [ 1541.468703][T20102] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1541.524494][T20099] device batadv0 left promiscuous mode [ 1541.791200][T20099] device batadv0 entered promiscuous mode [ 1541.860024][T20099] device batadv0 left promiscuous mode 06:10:14 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:10:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000740)={&(0x7f0000000200), 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r3 = socket(0x6000000000010, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, r5, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40080040}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492778, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r6, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KIOCSOUND(r7, 0x4b2f, 0xfff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c80)={0x3b0, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdbac}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x54}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd47}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK={0x12c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc532}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8a}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f89}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x58}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf8af}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc46}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcbd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac99}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xefd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf719}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) 06:10:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x706a010000000000) 06:10:14 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0xa, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x9effffff}, 0x0) 06:10:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd36a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1543.871791][T20127] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1543.910485][T20128] device batadv0 entered promiscuous mode [ 1543.971533][T20128] device batadv0 left promiscuous mode 06:10:15 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1544.310306][T20141] device batadv0 entered promiscuous mode [ 1544.364392][T20141] device batadv0 left promiscuous mode 06:10:15 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1544.484946][T20127] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1544.520933][T20128] device batadv0 entered promiscuous mode [ 1544.580923][T20128] device batadv0 left promiscuous mode 06:10:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000000000000110011000300686173683a6e65742c6e6574000000000900020073797a31000000000c0007800800064000000000050001000700000005000400000000000500050002000000"], 0x58}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r3, @ANYBLOB="0f280a7e", @ANYRES32=r5, @ANYBLOB="0500030000000000"], 0x48}}, 0x0) r6 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10) accept4$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10, 0x0) 06:10:15 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1544.868434][T20171] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 06:10:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd36a0200, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1545.121102][T20180] device batadv0 entered promiscuous mode [ 1545.202823][T20180] device batadv0 left promiscuous mode [ 1545.288473][T20171] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 06:10:17 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:10:17 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0xc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x716a010000000000) 06:10:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0xe) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x10005, 0xe) r5 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x100, 0xa, 0x4, 0x1000000, 0x9, {0x0, 0x7530}, {0x1, 0x8, 0xc0, 0x5, 0x4, 0x6, "0b96223d"}, 0x8cd, 0x3, @fd=r3, 0x4, 0x0, r5}) r7 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x492492492492778, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010000000000000073683a6e65742c6e6574000000000900020073797a31000000000c0007800800064000000000050001000700000005000400000000000500050002000000"], 0x58}}, 0x0) 06:10:17 executing program 5: r0 = io_uring_setup(0x65, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) socketpair(0x11, 0x80002, 0x7fffffff, &(0x7f0000000140)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)={0xfff, 0x6, 0x4, 0x2000000, 0x1fd, {0x77359400}, {0x3, 0x1, 0x8c, 0x2, 0x20, 0x0, "c6345544"}, 0x5, 0x2, @userptr=0x1, 0x5, 0x0, r2}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28001, 0x0) r5 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={r6, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r6, 0x80000001}, &(0x7f0000000280)=0x8) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x80, 0x3, 0x4, 0x10, 0x7, {r7, r8/1000+10000}, {0x3, 0x0, 0x9, 0xa, 0x34, 0x7f, "fd7212f0"}, 0x81, 0x4, @offset=0xd8f, 0x7, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_SUBDEV_S_CROP(r10, 0xc038563c, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x5, 0x54, 0x9}}) ioctl$TCXONC(r9, 0x540a, 0x2) [ 1546.918617][T20195] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1546.982607][T20196] device batadv0 entered promiscuous mode [ 1547.044735][T20196] device batadv0 left promiscuous mode [ 1547.071950][T20217] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 06:10:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:10:18 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) sendmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x3, @mcast1}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)="358fcbd32182ebe76a416ec98dda8e679a409c5038f45272b20115628e127dc94727f57d17f950804b8258ebb88ad7273604b3b5b17cab1ad9f843380959ef54c630e14f3fd490360e75c9d23f74b6d2bcbe94cc3bf61084f1839dd6d26b84278bd8b60b048c83a95e778aff95", 0x6d}, {&(0x7f00000001c0)="95d19d6e8e010585b5321795419086b98f6309ffdb042b651da224e7f3c3b82d7d64c6c87618d28ff76390180673297f60864ec77b1965094697b5693c9989ec509b65839ab0f87ea3a9f6f5bebbfa5782d12579fc9a609fc473e717e3ca92c2ed742a7cd5b5171799a439356262ff89d6ae97724f65dc5964cdda8ba5a1949d9d13c903806ac69c0ee68f0af7320720bd8f07e4f91de795ac21e3a449c28f2b0080c3f8c267c5c55614ac607df148fca887b16681191ae5b03daf2e", 0xbc}, {&(0x7f0000000280)}, {&(0x7f0000000340)="4a4512d0e14d5f19f66f2f425cc3dad9180ac92d509333a62ae84b7f447bb6b3922b06dca3bd0b51bfef0ee53f35bfcbbcfae670092208e13f622f7a218e9beb1455aa3eae86c798d5aa8188c2412f75bda5", 0x52}], 0x4, &(0x7f0000000400)=[{0xd0, 0xff, 0x7, "e6325dc83e92f20aa9b6c2a5463235182dabead91e584d0dcf7ed6ebff4646c7de5cf698eaa38a7af4c810a7aca901e24d348b92c0197cd443182047fdbabd4511954c8efd2ee723e74c0573a3a2cd8e39f6127db53b3850c13902912adc1cd2c458b5caac0183ed706e35b6e876e2cb8302fba1a286ca14af44eb2c0ab7d031d8088f17e6dd25f53b88f817699d402806eff5fbc27aa6957785a989bbcdc751ef1d80ac9c5b84b95a4f254c24da127726a5def5f90e885d75619c19ec14225f"}, {0xa0, 0x102, 0x6, "a9819aec790a8286b4aef1c40efe7a1b4cca9d4cd9765b1bf5ef38e2bb231d43cd74ad4368b691692c4ffbbef9091f848e3558aff945e22b6f218540a3af458d74b4677b15dca13572315975a168d47cf5365c19eef4acfae7e0e9a349d1aaa551426f27d21f7ee960831c94010205f35da34f693ed380bbc28c9846cfafecd959b1ceb64a214f117051b9634c8947ce"}, {0x60, 0x10f, 0xfffffff7, "45329ce1da4076bba93da2208cd4ce30b5471ba2d9abcf40d4c67e31069dac9a2029730ba403a7276239a2565204297885a199dd536cc2a92c8ab45282c5ab12da144acface70b8844a375e8616de5"}, {0xd8, 0x10c, 0x9, "772540292648bc961c6fec8059ce200dd2b2660094e445ea90c9eb8dd96c11c5edface7a491c73b71a22aada983e1299f56027c29d0e091e92f8d34c6153781e83ba00d77bfc30491d13008fb3d0911b89d35eedf49c72197449da2ed8f3f8e332c96fcc3b4fd51680f327c38bda7692d8bab0a6e057e90bab2a100cd4cb63fec2bd34d3939f31a25c9ad7b074e6659098b4902596e8574f4824194750800079763053acd9aee4ac6df63f0a7487fa61e94dde3fdc8b829d52011bb7c53fbc0270"}, {0xf8, 0x117, 0x8, "b380577842b713b2bc995dc617f56d8c2bec0061e5a84a37a3e002585fa889e6e2c60f6577bbc4ab64ff7ae64b2ad684d13e11e7a51768ce9e2c19e70ce330bfca9cde3dc38dfb283ccbc8ce86aaccb4d8ad6485f13eaabbf6177bc26bdfcc52e4a4430951eef4e9c4750c971a4c91a75363540bd9eae47ea86e396a8ed8ed48f898862d8b96a960decd750bb9a793749ca8a0e5b47ba66e254a49801a225cda84af73e072eeb44f237a2d13e315fa0e748e28264f0833d6a695193aa42fc86edd81810ecbb4542760228f5e2aac7c1e65e5cd955fd67bdf00471c29fafe8eb18efbb8fc"}, {0x58, 0x118, 0x39c0000, "d0a0e9559648c51fc62ecc6efda66cf935668f21ef04609a425374be36304256cfc0b71538cf754931a495c6e246e5dcbab7ab06f75ba7f49a65a5e8f05726abf2"}], 0x3f8}, 0x48000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x9d, 0x4) 06:10:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0xe, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x726a010000000000) 06:10:18 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x600, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1547.710584][T20233] device batadv0 entered promiscuous mode [ 1547.717947][T20237] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1547.799466][T20233] device batadv0 left promiscuous mode [ 1548.124481][T20233] device batadv0 entered promiscuous mode [ 1548.180955][T20233] device batadv0 left promiscuous mode 06:10:20 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:10:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @remote}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 06:10:20 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = eventfd2(0xfffff001, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = io_uring_setup(0x65, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r4 = socket(0x6000000000010, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)=""/123, 0x7b}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/63, 0x3f}, {&(0x7f0000001680)=""/17, 0x11}, {&(0x7f0000001780)=""/237, 0xed}], 0x6) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001700)='/dev/sg#\x00', 0xc7, 0x101200) r6 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x140000000, 0x4a8440) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xe8, r8, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x99}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x0, 0x8, 0x7d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x90}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0xffffffffffffff03, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9e}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1003000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="08002abd7000fbdbdf250f0000003400018008000b0073697000090006006c626c63000000000c0007000000000013000000060001000a000000060001000a0000002400028008000600710000000800030000000000060002004e22000008000900070000000c00038008000500000000002c00038014000600ff01000000000000000000000000000114000600ff020000000000000000000000000001080006003e070000"], 0xac}, 0x1, 0x0, 0x0, 0x40040}, 0x200000c5) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000001740)=[r4, r5], 0x2) io_uring_enter(r2, 0x0, 0x0, 0x1, 0x0, 0x0) 06:10:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x736a010000000000) 06:10:20 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x600, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x10, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:21 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x600, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1550.011592][T20259] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1550.070077][T20263] device batadv0 entered promiscuous mode [ 1550.142512][T20263] device batadv0 left promiscuous mode 06:10:21 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x600, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:21 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:10:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x12, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:21 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x600, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x7400000000000000) 06:10:21 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) [ 1550.721735][T20294] device batadv0 entered promiscuous mode [ 1550.807184][T20304] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1550.818647][T20294] device batadv0 left promiscuous mode [ 1551.240125][T20294] device batadv0 entered promiscuous mode [ 1551.305388][T20294] device batadv0 left promiscuous mode 06:10:22 executing program 5 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) 06:10:22 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba01c0f3736bb72ca1e78542e1", 0xbe}], 0x4, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:10:22 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x600, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x746a010000000000) 06:10:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x36, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28001, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r3, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r3, 0x0, 0x4, [0x2, 0x4, 0x1, 0x100]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={r4, 0x400}, &(0x7f0000000240)=0x8) r5 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x492492492492778, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) epoll_create(0x1ff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x1160, 0x12, 0x200, 0x70bd28, 0x25dfdbfd, {0xb, 0x8, 0x0, 0x8, {0x4e21, 0x4e20, [0x80, 0x2, 0x4, 0x1], [0x1, 0x1000, 0x4d000000, 0x7], r9, [0x3ff, 0x200]}, 0x10001, 0x2f11}, [@INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "1331050859d35727cced2932e02cf34790a321f21eca7e78616bf515c34cf6fe7b8a9f61ab2e1379f2d18a3d698d045a4409c5ae61c6c29f68eb4e4964f27017306685f17dea679139218b485e3fc735b000875902ce3e88f012eb1d419edbfa728fdbcd5c44708a9a1f6059082d3918e8a7c51b39af1874657a1dd91f1820e6da598de4d8c32ca09181bbe18f9fbaf25680af5816bb39612037d4817b5e7fcfb6f1d097bce9f43a33350afcf5fa2d3fe6bac91021cfd31e4739a2dcee6cf0ef9780d31f8544cfbaf92a1126edf855f49912"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "ea352e0da32d13d18b9824366c4529b70c84a1c5e99ac70cb14ef6b21d561ba1892dc2941e0790e562cd9ad16c0f1951dacc"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1160}, 0x1, 0x0, 0x0, 0x20048800}, 0x80) [ 1551.773630][T20325] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1551.776456][T20324] FAULT_INJECTION: forcing a failure. [ 1551.776456][T20324] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.800218][T20324] CPU: 0 PID: 20324 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 1551.808616][T20324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1551.818702][T20324] Call Trace: [ 1551.822036][T20324] dump_stack+0x188/0x20d [ 1551.826565][T20324] should_fail.cold+0x5/0xa [ 1551.831132][T20324] ? lock_downgrade+0x840/0x840 [ 1551.836027][T20324] ? fault_create_debugfs_attr+0x140/0x140 [ 1551.841885][T20324] should_failslab+0x5/0xf [ 1551.846347][T20324] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1551.851770][T20324] ? security_capable+0x8e/0xc0 [ 1551.856669][T20324] ? io_account_mem+0x108/0x140 [ 1551.861566][T20324] io_uring_setup+0x323/0x2350 [ 1551.866386][T20324] ? io_sq_thread+0xbe0/0xbe0 [ 1551.871125][T20324] ? wait_for_completion+0x270/0x270 [ 1551.876582][T20324] ? __this_cpu_preempt_check+0x28/0x190 [ 1551.882257][T20324] ? __sb_end_write+0x101/0x1d0 [ 1551.887173][T20324] ? __ia32_sys_clock_settime+0x260/0x260 [ 1551.892933][T20324] ? trace_hardirqs_off_caller+0x55/0x230 [ 1551.898719][T20324] do_syscall_64+0xf6/0x7d0 [ 1551.903272][T20324] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1551.909284][T20324] RIP: 0033:0x45c889 [ 1551.913211][T20324] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1551.933148][T20324] RSP: 002b:00007f03f4b4cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1551.941722][T20324] RAX: ffffffffffffffda RBX: 00007f03f4b4d6d4 RCX: 000000000045c889 [ 1551.949727][T20324] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000065 [ 1551.957735][T20324] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1551.965736][T20324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 06:10:22 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1551.973820][T20324] R13: 0000000000000202 R14: 00000000004c4284 R15: 0000000000000000 06:10:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x48, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:23 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:23 executing program 5 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) [ 1552.199313][T20342] device batadv0 entered promiscuous mode [ 1552.262012][T20354] FAULT_INJECTION: forcing a failure. [ 1552.262012][T20354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1552.275327][T20354] CPU: 0 PID: 20354 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 1552.283689][T20354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1552.293772][T20354] Call Trace: [ 1552.297107][T20354] dump_stack+0x188/0x20d [ 1552.301493][T20354] should_fail.cold+0x5/0xa [ 1552.306109][T20354] ? fault_create_debugfs_attr+0x140/0x140 [ 1552.311986][T20354] ? perf_trace_lock+0x315/0x4c0 [ 1552.316972][T20354] ? perf_trace_lock+0x315/0x4c0 [ 1552.329787][T20354] __alloc_pages_nodemask+0x17a/0x810 [ 1552.335224][T20354] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1552.342028][T20354] ? find_held_lock+0x2d/0x110 [ 1552.346935][T20354] ? __might_fault+0x11f/0x1d0 [ 1552.351754][T20354] ? lock_downgrade+0x840/0x840 [ 1552.356684][T20354] cache_grow_begin+0x8c/0xc10 [ 1552.361508][T20354] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1552.367343][T20354] kmem_cache_alloc_trace+0x6ed/0x7d0 [ 1552.372763][T20354] ? io_account_mem+0x108/0x140 [ 1552.377767][T20354] io_uring_setup+0x323/0x2350 [ 1552.382583][T20354] ? io_sq_thread+0xbe0/0xbe0 [ 1552.387305][T20354] ? wait_for_completion+0x270/0x270 [ 1552.392641][T20354] ? __this_cpu_preempt_check+0x28/0x190 [ 1552.398317][T20354] ? __sb_end_write+0x101/0x1d0 [ 1552.403232][T20354] ? __ia32_sys_clock_settime+0x260/0x260 [ 1552.408994][T20354] ? trace_hardirqs_off_caller+0x55/0x230 [ 1552.414770][T20354] do_syscall_64+0xf6/0x7d0 [ 1552.419326][T20354] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1552.425344][T20354] RIP: 0033:0x45c889 [ 1552.429271][T20354] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1552.449009][T20354] RSP: 002b:00007f03f4b4cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1552.457581][T20354] RAX: ffffffffffffffda RBX: 00007f03f4b4d6d4 RCX: 000000000045c889 [ 1552.465582][T20354] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000065 [ 1552.473584][T20354] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1552.481585][T20354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1552.489588][T20354] R13: 0000000000000202 R14: 00000000004c4284 R15: 0000000000000001 [ 1552.541353][T20342] device batadv0 left promiscuous mode 06:10:23 executing program 5 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) [ 1552.641252][T20348] device batadv0 entered promiscuous mode [ 1552.702228][T20348] device batadv0 left promiscuous mode [ 1552.724194][T20369] FAULT_INJECTION: forcing a failure. [ 1552.724194][T20369] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.745757][T20369] CPU: 1 PID: 20369 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 1552.754140][T20369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1552.764214][T20369] Call Trace: [ 1552.767539][T20369] dump_stack+0x188/0x20d [ 1552.771912][T20369] should_fail.cold+0x5/0xa [ 1552.776451][T20369] ? lock_downgrade+0x840/0x840 [ 1552.781365][T20369] ? fault_create_debugfs_attr+0x140/0x140 [ 1552.787214][T20369] should_failslab+0x5/0xf [ 1552.791667][T20369] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1552.797086][T20369] ? kmem_cache_alloc+0x358/0x740 [ 1552.802675][T20369] ? security_capable+0x8e/0xc0 [ 1552.807905][T20369] ? io_account_mem+0x108/0x140 [ 1552.812806][T20369] io_uring_setup+0x3b3/0x2350 [ 1552.817614][T20369] ? io_sq_thread+0xbe0/0xbe0 [ 1552.822438][T20369] ? wait_for_completion+0x270/0x270 [ 1552.827782][T20369] ? __this_cpu_preempt_check+0x28/0x190 [ 1552.833457][T20369] ? __sb_end_write+0x101/0x1d0 [ 1552.838347][T20369] ? __ia32_sys_clock_settime+0x260/0x260 [ 1552.838363][T20369] ? trace_hardirqs_off_caller+0x55/0x230 [ 1552.838386][T20369] do_syscall_64+0xf6/0x7d0 [ 1552.838406][T20369] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1552.838419][T20369] RIP: 0033:0x45c889 [ 1552.838433][T20369] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1552.838441][T20369] RSP: 002b:00007f03f4b4cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1552.838456][T20369] RAX: ffffffffffffffda RBX: 00007f03f4b4d6d4 RCX: 000000000045c889 06:10:23 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1552.838465][T20369] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000065 [ 1552.838474][T20369] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1552.838482][T20369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1552.838497][T20369] R13: 0000000000000202 R14: 00000000004c4284 R15: 0000000000000002 06:10:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x74e7020000000000) [ 1553.010255][T20373] device batadv0 entered promiscuous mode [ 1553.069759][T20384] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1553.104104][T20373] device batadv0 left promiscuous mode 06:10:25 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x281, 0x480000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0xb1d89f3dfdc8fed7, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r4, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002abd700109dbdf25050000000c000280080001000900000029b33a675f5c6b854bb5a106b22ac131c67a807a7db970ef9e8411d64a00772fac2f17c4a31ade7fb67c3ceffb48360e1f5a5e798a6fb6d940c70ce7e0433880fda9ce9c135683975f0a92602044c29bd4dae595f1ca8a6399c335a4eb4e346cda26f36fb1f8ec3b4f8ce0c41bc0839f047a0d29d5fa974e9acff28657ac93ea6599424b722c1b890dc390fde4cd082c503aed33a1fdca7e4786e2552d6b7305f9c8f3531888d97a622cc13033dd723ae4377a77fcfba0e934c982f36b732ca83b674bc35bcf0b000000001ce6adc464b30d525dfa963975bd4321f3a50edc680976a0820740e583dd7e082533a5ddb1981457ad847e1e9efc53aba1a72f543907e50b6d"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) 06:10:25 executing program 5 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) 06:10:25 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x4a, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 06:10:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2002088c}, 0x881) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x44ea00, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0xe, 0xe, 0x1c8, &(0x7f0000000180)}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000640)='/dev/audio#\x00', 0x80000000, 0x10000) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000680)) accept$inet(r1, 0x0, &(0x7f0000000100)) r4 = socket(0x6000000000010, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xfffffd9c) 06:10:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x756a010000000000) [ 1554.833790][T20401] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1554.851965][T20405] FAULT_INJECTION: forcing a failure. [ 1554.851965][T20405] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.871434][T20399] device batadv0 entered promiscuous mode 06:10:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492778, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x28001, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r3, 0xffff4441, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r3, 0x0, 0x4, [0x2, 0x4, 0x1, 0x100]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={r4, 0x400}, &(0x7f0000000240)=0x8) r5 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x492492492492778, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) epoll_create(0x1ff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x1160, 0x12, 0x200, 0x70bd28, 0x25dfdbfd, {0xb, 0x8, 0x0, 0x8, {0x4e21, 0x4e20, [0x80, 0x2, 0x4, 0x1], [0x1, 0x1000, 0x4d000000, 0x7], r9, [0x3ff, 0x200]}, 0x10001, 0x2f11}, [@INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "1331050859d35727cced2932e02cf34790a321f21eca7e78616bf515c34cf6fe7b8a9f61ab2e1379f2d18a3d698d045a4409c5ae61c6c29f68eb4e4964f27017306685f17dea679139218b485e3fc735b000875902ce3e88f012eb1d419edbfa728fdbcd5c44708a9a1f6059082d3918e8a7c51b39af1874657a1dd91f1820e6da598de4d8c32ca09181bbe18f9fbaf25680af5816bb39612037d4817b5e7fcfb6f1d097bce9f43a33350afcf5fa2d3fe6bac91021cfd31e4739a2dcee6cf0ef9780d31f8544cfbaf92a1126edf855f49912"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "ea352e0da32d13d18b9824366c4529b70c84a1c5e99ac70cb14ef6b21d561ba1892dc2941e0790e562cd9ad16c0f1951dacc"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1160}, 0x1, 0x0, 0x0, 0x20048800}, 0x80) [ 1554.899154][T20405] CPU: 0 PID: 20405 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 1554.907553][T20405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1554.917633][T20405] Call Trace: [ 1554.920959][T20405] dump_stack+0x188/0x20d [ 1554.925336][T20405] should_fail.cold+0x5/0xa [ 1554.929872][T20405] ? lock_downgrade+0x840/0x840 [ 1554.934760][T20405] ? fault_create_debugfs_attr+0x140/0x140 [ 1554.940655][T20405] should_failslab+0x5/0xf [ 1554.945105][T20405] __kmalloc+0x2d9/0x7a0 [ 1554.949391][T20405] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1554.954968][T20405] ? io_uring_setup+0x44a/0x2350 [ 1554.959940][T20405] ? security_capable+0x8e/0xc0 [ 1554.964961][T20405] ? io_account_mem+0x108/0x140 [ 1554.969853][T20405] io_uring_setup+0x44a/0x2350 [ 1554.974660][T20405] ? io_sq_thread+0xbe0/0xbe0 [ 1554.979369][T20405] ? wait_for_completion+0x270/0x270 [ 1554.984862][T20405] ? __this_cpu_preempt_check+0x28/0x190 [ 1554.990518][T20405] ? __sb_end_write+0x101/0x1d0 [ 1554.990564][T20405] ? __ia32_sys_clock_settime+0x260/0x260 [ 1554.990583][T20405] ? trace_hardirqs_off_caller+0x55/0x230 [ 1554.990615][T20405] do_syscall_64+0xf6/0x7d0 [ 1555.007000][T20405] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1555.017384][T20405] RIP: 0033:0x45c889 [ 1555.021323][T20405] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1555.040943][T20405] RSP: 002b:00007f03f4b4cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1555.040963][T20405] RAX: ffffffffffffffda RBX: 00007f03f4b4d6d4 RCX: 000000000045c889 [ 1555.040972][T20405] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000065 [ 1555.040984][T20405] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1555.040994][T20405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1555.041006][T20405] R13: 0000000000000202 R14: 00000000004c4284 R15: 0000000000000003 06:10:26 executing program 5 (fault-call:1 fault-nth:4): perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x65, &(0x7f0000000040)) [ 1555.130544][T20399] device batadv0 left promiscuous mode 06:10:26 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") [ 1555.264465][T20424] FAULT_INJECTION: forcing a failure. [ 1555.264465][T20424] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1555.342256][T20424] CPU: 0 PID: 20424 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 1555.350746][T20424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1555.360823][T20424] Call Trace: [ 1555.364141][T20424] dump_stack+0x188/0x20d [ 1555.368508][T20424] should_fail.cold+0x5/0xa [ 1555.373034][T20424] ? pcpu_alloc+0x3d0/0x1200 [ 1555.377651][T20424] ? fault_create_debugfs_attr+0x140/0x140 [ 1555.384719][T20424] __alloc_pages_nodemask+0x17a/0x810 [ 1555.390122][T20424] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1555.396144][T20424] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1555.402957][T20424] ? lockdep_init_map_waits+0x26a/0x890 [ 1555.408526][T20424] alloc_pages_current+0xff/0x200 [ 1555.413568][T20424] __get_free_pages+0x8/0x40 [ 1555.413590][T20424] io_uring_setup+0xc3b/0x2350 [ 1555.413622][T20424] ? io_sq_thread+0xbe0/0xbe0 [ 1555.413643][T20424] ? wait_for_completion+0x270/0x270 [ 1555.413661][T20424] ? __this_cpu_preempt_check+0x28/0x190 [ 1555.413681][T20424] ? __sb_end_write+0x101/0x1d0 [ 1555.413720][T20424] ? __ia32_sys_clock_settime+0x260/0x260 [ 1555.413742][T20424] ? trace_hardirqs_off_caller+0x55/0x230 [ 1555.455143][T20424] do_syscall_64+0xf6/0x7d0 [ 1555.459690][T20424] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1555.465605][T20424] RIP: 0033:0x45c889 [ 1555.469522][T20424] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:10:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x1ba8e}], 0x1}, 0x766a010000000000) [ 1555.489239][T20424] RSP: 002b:00007f03f4b4cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1555.497817][T20424] RAX: ffffffffffffffda RBX: 00007f03f4b4d6d4 RCX: 000000000045c889 [ 1555.505865][T20424] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000065 [ 1555.513863][T20424] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1555.521862][T20424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1555.529859][T20424] R13: 0000000000000202 R14: 00000000004c4284 R15: 0000000000000004 [ 1555.594824][T20416] device batadv0 entered promiscuous mode [ 1555.602445][T20434] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1555.682189][T20416] device batadv0 left promiscuous mode 06:10:26 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) wait4(0x0, 0x0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000300)="5755010b2aa4920d8c0dd9bd6e693545a11d9626d14228db99feb2f160ca123000007d3cd3ea2dba38df3b60353c04d96e12343a177ba609ccba4fe51fe22b970000000000100000000000000098e9cf46330a06dc5799cafe02a4e3250f7bf1e2") 06:10:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x4c, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 1556.020913][T20447] device batadv0 entered promiscuous mode [ 1556.046512][T20424] INFO: trying to register non-static key. [ 1556.052359][T20424] the code is fine but needs lockdep annotation. [ 1556.058679][T20424] turning off the locking correctness validator. [ 1556.065006][T20424] CPU: 0 PID: 20424 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 1556.073320][T20424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.083366][T20424] Call Trace: [ 1556.086670][T20424] dump_stack+0x188/0x20d [ 1556.091006][T20424] register_lock_class+0x1664/0x1760 [ 1556.096306][T20424] ? mark_held_locks+0xe0/0xe0 [ 1556.101090][T20424] ? lock_downgrade+0x840/0x840 [ 1556.105954][T20424] ? is_dynamic_key+0x1a0/0x1a0 [ 1556.110824][T20424] ? __lock_acquire+0x2165/0x4e00 [ 1556.115866][T20424] __lock_acquire+0x104/0x4e00 [ 1556.120646][T20424] ? mark_lock+0x12b/0xf10 [ 1556.125075][T20424] ? is_dynamic_key+0x1a0/0x1a0 [ 1556.129938][T20424] ? print_usage_bug+0x240/0x240 [ 1556.134889][T20424] ? mark_held_locks+0xe0/0xe0 [ 1556.139671][T20424] ? mark_held_locks+0xe0/0xe0 [ 1556.144452][T20424] ? __lock_acquire+0x2165/0x4e00 [ 1556.149489][T20424] lock_acquire+0x1f2/0x8f0 [ 1556.154081][T20424] ? __wake_up_common_lock+0xb4/0x130 [ 1556.159476][T20424] ? lock_release+0x800/0x800 [ 1556.164165][T20424] ? mark_held_locks+0xe0/0xe0 [ 1556.168945][T20424] ? find_held_lock+0x2d/0x110 [ 1556.173724][T20424] ? io_ring_ctx_wait_and_kill+0x40/0x5a0 [ 1556.179506][T20424] _raw_spin_lock_irqsave+0x8c/0xbf [ 1556.184718][T20424] ? __wake_up_common_lock+0xb4/0x130 [ 1556.190105][T20424] __wake_up_common_lock+0xb4/0x130 [ 1556.195322][T20424] ? __wake_up_common+0x650/0x650 [ 1556.200366][T20424] ? rwlock_bug.part.0+0x90/0x90 [ 1556.205321][T20424] io_cqring_ev_posted+0xa5/0x1e0 [ 1556.210363][T20424] io_ring_ctx_wait_and_kill+0x2bc/0x5a0 [ 1556.216015][T20424] io_uring_setup+0x115e/0x2350 [ 1556.220882][T20424] ? io_sq_thread+0xbe0/0xbe0 [ 1556.225574][T20424] ? wait_for_completion+0x270/0x270 [ 1556.230868][T20424] ? __this_cpu_preempt_check+0x28/0x190 [ 1556.236511][T20424] ? __sb_end_write+0x101/0x1d0 [ 1556.241384][T20424] ? __ia32_sys_clock_settime+0x260/0x260 [ 1556.247122][T20424] ? trace_hardirqs_off_caller+0x55/0x230 [ 1556.252858][T20424] do_syscall_64+0xf6/0x7d0 [ 1556.257387][T20424] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1556.263289][T20424] RIP: 0033:0x45c889 [ 1556.267196][T20424] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1556.286806][T20424] RSP: 002b:00007f03f4b4cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1556.295234][T20424] RAX: ffffffffffffffda RBX: 00007f03f4b4d6d4 RCX: 000000000045c889 [ 1556.303214][T20424] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000065 [ 1556.311193][T20424] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1556.319172][T20424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1556.327153][T20424] R13: 0000000000000202 R14: 00000000004c4284 R15: 0000000000000004 [ 1556.335435][T20424] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1556.347151][T20424] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1556.355576][T20424] CPU: 0 PID: 20424 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 1556.363909][T20424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.374001][T20424] RIP: 0010:__wake_up_common+0xdf/0x650 [ 1556.379560][T20424] Code: 05 00 00 4c 8b 43 40 49 83 e8 18 49 8d 78 18 48 39 3c 24 0f 84 6a 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <80> 3c 01 00 0f 85 3d 05 00 00 49 8b 40 18 89 54 24 10 31 db 48 bd [ 1556.399175][T20424] RSP: 0018:ffffc90017cf7c20 EFLAGS: 00010046 [ 1556.405252][T20424] RAX: dffffc0000000000 RBX: ffff88808743f120 RCX: 0000000000000000 [ 1556.413237][T20424] RDX: 0000000000000001 RSI: 1ffffffff15128d2 RDI: 0000000000000000 [ 1556.421306][T20424] RBP: 0000000000000000 R08: ffffffffffffffe8 R09: ffffc90017cf7cb8 [ 1556.429291][T20424] R10: 0000000000000003 R11: fffff52002f9ef7e R12: 0000000000000001 [ 1556.437973][T20424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1556.445961][T20424] FS: 00007f03f4b4d700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1556.454905][T20424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1556.461499][T20424] CR2: 00007ffe7e7be2c8 CR3: 000000009b189000 CR4: 00000000001426f0 [ 1556.469484][T20424] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1556.477465][T20424] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1556.485444][T20424] Call Trace: [ 1556.488772][T20424] __wake_up_common_lock+0xd0/0x130 [ 1556.493997][T20424] ? __wake_up_common+0x650/0x650 [ 1556.499044][T20424] ? rwlock_bug.part.0+0x90/0x90 [ 1556.504003][T20424] io_cqring_ev_posted+0xa5/0x1e0 [ 1556.509049][T20424] io_ring_ctx_wait_and_kill+0x2bc/0x5a0 [ 1556.514710][T20424] io_uring_setup+0x115e/0x2350 [ 1556.519584][T20424] ? io_sq_thread+0xbe0/0xbe0 [ 1556.524280][T20424] ? wait_for_completion+0x270/0x270 [ 1556.529576][T20424] ? __this_cpu_preempt_check+0x28/0x190 [ 1556.535231][T20424] ? __sb_end_write+0x101/0x1d0 [ 1556.540100][T20424] ? __ia32_sys_clock_settime+0x260/0x260 [ 1556.545846][T20424] ? trace_hardirqs_off_caller+0x55/0x230 [ 1556.551592][T20424] do_syscall_64+0xf6/0x7d0 [ 1556.556117][T20424] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1556.563463][T20424] RIP: 0033:0x45c889 [ 1556.567374][T20424] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1556.587079][T20424] RSP: 002b:00007f03f4b4cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1556.595503][T20424] RAX: ffffffffffffffda RBX: 00007f03f4b4d6d4 RCX: 000000000045c889 [ 1556.603485][T20424] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000065 [ 1556.611469][T20424] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1556.619451][T20424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1556.627432][T20424] R13: 0000000000000202 R14: 00000000004c4284 R15: 0000000000000004 [ 1556.635507][T20424] Modules linked in: [ 1556.639425][T20424] ---[ end trace df4f22dfa3b644c6 ]--- [ 1556.644900][T20424] RIP: 0010:__wake_up_common+0xdf/0x650 [ 1556.650456][T20424] Code: 05 00 00 4c 8b 43 40 49 83 e8 18 49 8d 78 18 48 39 3c 24 0f 84 6a 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <80> 3c 01 00 0f 85 3d 05 00 00 49 8b 40 18 89 54 24 10 31 db 48 bd [ 1556.670181][T20424] RSP: 0018:ffffc90017cf7c20 EFLAGS: 00010046 [ 1556.676265][T20424] RAX: dffffc0000000000 RBX: ffff88808743f120 RCX: 0000000000000000 [ 1556.684250][T20424] RDX: 0000000000000001 RSI: 1ffffffff15128d2 RDI: 0000000000000000 [ 1556.692235][T20424] RBP: 0000000000000000 R08: ffffffffffffffe8 R09: ffffc90017cf7cb8 [ 1556.700218][T20424] R10: 0000000000000003 R11: fffff52002f9ef7e R12: 0000000000000001 [ 1556.708199][T20424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1556.716280][T20424] FS: 00007f03f4b4d700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1556.725217][T20424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1556.731819][T20424] CR2: 00007ffe7e7be2c8 CR3: 000000009b189000 CR4: 00000000001426f0 [ 1556.739803][T20424] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1556.747788][T20424] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1556.755877][T20424] Kernel panic - not syncing: Fatal exception [ 1556.763441][T20424] Kernel Offset: disabled [ 1556.767779][T20424] Rebooting in 86400 seconds..