0, 0x0) 19:01:03 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000c00", 0x24) 19:01:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xfeffffff}, 0x0) [ 2322.983003] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2323.462773] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6, {0x0, 0x8100}}}}}}}}}, 0x6c) 19:01:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x20281) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:04 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000e00", 0x24) 19:01:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xff0f0000}, 0x0) 19:01:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001098040774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:04 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000f00", 0x24) [ 2324.006170] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2324.034131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38928 sclass=netlink_route_socket pig=30659 comm=syz-executor.4 19:01:05 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xa9f79933ccb66e4e, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x100) 19:01:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001002050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2324.251912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pig=30677 comm=syz-executor.4 19:01:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xff7f0000}, 0x0) 19:01:05 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000000)={0x4a, 0x4, &(0x7f0000000200)}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001003050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2324.440705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pig=30694 comm=syz-executor.4 19:01:05 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2324.859251] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6, {0x0, 0x8847}}}}}}}}}, 0x6c) 19:01:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001004050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:06 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000942600", 0x24) 19:01:06 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x201) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1f}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r4 = creat(0x0, 0x0) ftruncate(r4, 0x208200) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r6, &(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0) keyctl$unlink(0x9, r6, 0xfffffffffffffffb) 19:01:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xffff1f00}, 0x0) 19:01:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x80c02, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x0) ftruncate(r4, 0x208200) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x2400c010) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000009000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2325.323359] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2325.332858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pig=30733 comm=syz-executor.4 19:01:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001005050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:06 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = accept4$netrom(r3, &(0x7f0000000000)={{0x3, @bcast}, [@remote, @bcast, @rose, @remote, @null, @default, @default, @default]}, &(0x7f0000000080)=0x48, 0x80000) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) 19:01:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xffffa888}, 0x0) [ 2325.536611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pig=30765 comm=syz-executor.4 19:01:06 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001006050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2325.699263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1552 sclass=netlink_route_socket pig=30784 comm=syz-executor.4 19:01:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001007050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2325.907610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pig=30795 comm=syz-executor.4 [ 2325.984872] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6, {0x0, 0x8848}}}}}}}}}, 0x6c) 19:01:06 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x33) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) ptrace$cont(0x7, r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000000)=0xdae) 19:01:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001008050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:06 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000003f00", 0x24) [ 2326.052507] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xfffff000}, 0x0) 19:01:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001009050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:07 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000655800", 0x24) 19:01:07 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x1, 0x4d, "face6dbebc3bbbe447858000725d9b32c4ff734985ed84fb6e91a3818d942fef4ef24206cdee881d76eee2e00ecfe13bbc7d7da3d72028ea6f89faf5a98b1387dd0a40a5b83b37356e7a10185a"}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xfffffffffffff627) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3f, 0x0, 0x0, 0x0, 0xaf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2000, 0x0, 0x0, 0x7}, 0x0, 0x10000, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100a050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2326.397316] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/659], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r6}, 0xc) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r6}, 0xc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r7}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100c050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100e050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6, {0x0, 0x8864}}}}}}}}}, 0x6c) 19:01:08 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xd, 0x1, '/dev/kvm\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, '/dev/kvm\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000c1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001010050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:08 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000006000", 0x24) 19:01:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xffffff7f}, 0x0) [ 2327.415409] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2327.446654] selinux_nlmsg_perm: 5 callbacks suppressed [ 2327.447700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pig=30910 comm=syz-executor.4 19:01:08 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000586500", 0x24) 19:01:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001012050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:08 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfa, 0x0, 0xff, 0x0, 0x0, 0x41c1, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="02"], 0x1, 0x0) msgctl$IPC_INFO(r5, 0x3, &(0x7f0000000200)=""/176) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000080)=""/82) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2327.642904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pig=30936 comm=syz-executor.4 19:01:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xffffff9e}, 0x0) 19:01:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001018050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2327.826158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6160 sclass=netlink_route_socket pig=30956 comm=syz-executor.4 19:01:08 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2328.114435] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6, {0x0, 0x8906}}}}}}}}}, 0x6c) 19:01:09 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80980, 0x0) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000040)={0x7, [0x1, 0x0, 0x7, 0x7, 0x101, 0x8, 0xfffb]}, &(0x7f0000000080)=0x12) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xef2b) 19:01:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001048050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:09 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000008100", 0x24) 19:01:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xffffffc3}, 0x0) [ 2328.272145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18448 sclass=netlink_route_socket pig=31000 comm=syz-executor.4 [ 2328.286960] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:09 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000269400", 0x24) 19:01:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000104a050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xffffffe4}, 0x0) [ 2328.465311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18960 sclass=netlink_route_socket pig=31028 comm=syz-executor.4 19:01:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000007ff300000000000000000000000000000000000002000000f6e6"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:09 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) fchown(r4, 0x0, r5) getgroups(0x1, &(0x7f0000000000)=[r5]) fchown(r2, r3, r5) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x33, 0x30, 0x0, 0x0) 19:01:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000104c050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2328.734270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19472 sclass=netlink_route_socket pig=31047 comm=syz-executor.4 19:01:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000104e050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2328.914068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19984 sclass=netlink_route_socket pig=31058 comm=syz-executor.4 [ 2328.939317] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:01:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001060050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:09 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000f000", 0x24) 19:01:09 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x5cfe02) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000440)={@multicast, @empty=[0x5], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x78, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffffffa005000000000000"}]}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r4, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xfffffff0}, 0x0) [ 2329.156325] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2329.168995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24592 sclass=netlink_route_socket pig=31089 comm=syz-executor.4 19:01:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001068050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:10 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000004003", 0x24) 19:01:10 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = creat(0x0, 0x0) ftruncate(r4, 0x208200) mkdir(&(0x7f0000000040)='./file0\x00', 0x88) bind$rds(r4, &(0x7f0000000000)={0x2, 0x5, @empty}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2329.391863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26640 sclass=netlink_route_socket pig=31114 comm=syz-executor.4 19:01:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001069050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xfffffffe}, 0x0) 19:01:10 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) bind(r1, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x1f, 0xb3, 0xe0000000, 0x1ff, 0x800, 0x30}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:10 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000340", 0x24) [ 2329.824623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26896 sclass=netlink_route_socket pig=31151 comm=syz-executor.4 19:01:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6, {0x0, 0x0, 0x2}}}}}}}}}, 0x6c) 19:01:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000106c050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) ptrace$cont(0x7, 0x0, 0x0, 0x0) getpgid(0x0) r5 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', r6, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc, &(0x7f0000001580)=[{&(0x7f00000016c0)={0x13b0, 0x18, 0x4, 0x3fc, 0x25dfcbfc, "", [@nested={0x62, 0x50, 0x0, 0x1, [@typed={0x4, 0x76}, @typed={0xd, 0x54, 0x0, 0x0, @str='/dev/kvm\x00'}, @generic="34447f424bbddeb7d478c87887dc0e45a3984fc85b58cda926811608010564428553f7cff2c0c5a124ff867c827c12007617497cc4adbf7c4ebe8b855692d2f5bf246f03985e59350211"]}, @nested={0xb4, 0x96, 0x0, 0x1, [@generic="dd033f4d6479d5eb8eff2a072c6ecea71d5f2ff6869f7c2e2a34bd1577ed43aea72b670f0ff51477533249af63b36f8b92dec49561a3275355c02263eb8742cb8c5a3cfb46a040276b73b28ae33282009561b044d34e0488710c17b818178523fb0069465d09410feb0a8d6d53cf225e0ee5f5228c55ebd09b4b94fd0a500753e5e0ad629c6a2268bad8ddfac12ebcf41c1d55430fe1abad792b3050d1a4a17a9c88c06c14e39f103891ca529d1457cc"]}, @nested={0x10b2, 0x33, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @uid}, @generic="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", @generic="3edef85444a2fc5810dca2f58e84706fb54d9ba1e7308c6198aadab4801b65b375d35c1d2396a2b9066e7a703bc6229f59dbf5cbcf9c301ba3bdf0d2511487ec2bd6b79a86b518600f83c439b810343bc0f359a5aed4c3a2f8284c3088385b0fb48c4caa50ea368a8d8a9ea4a5355aff8ad3b2464f40f08d4ee3c3ec8b209bd2577c46f5949267052ea04b456a4d21e3023059c8923a85ed9719691cda40cb6be2a890d2f949"]}, @nested={0x163, 0x42, 0x0, 0x1, [@generic="a69960b0feefcdc24ba0d05e46dbb7efbcf99769488372e657b1b1869498d63383dfdf29e7ee68c9ba9713f5436f42b2be2c9b5ed85d0bf181dfa890e1563657635fa477051cd8d58b29d2f9f6d0a4cade60107f8aa15a7ce8806cf64c3fdf9f5fc10337ce82b62def17d2d5f42ca5df660ee318e63ddda08eca652089", @generic="7161bf2a2b4b71d9534ccd58b3cc4d7a6ebfdb6a0ec02fa0fc9dd1943fbf07e058c53eb6d4c390535f5b9aa64c9e751b6a251ac1ec22b28b14a92fae5e0ba051155a68e7e37caf3d03486f6ffb356c315a0dfe59a98461871299055250a43746714a1ba417e8d32f0827e9714b968b93fbb4f9d65c67c78711e0d407a4d27c912c8562dfbf770105e2c061e4c9fc2d7210d4aa9628d62441de614715101ade42f9a0df2513f20ffc", @typed={0xb, 0x74, 0x0, 0x0, @str='filter\x00'}, @generic="3bd34308d7476aced00abaa6a376e9b6456fc03349e02414e41f6b5c4acb1dd05bd8d7cdd731b391e79d8c15c88c"]}, @typed={0x6e, 0x20, 0x0, 0x0, @binary="1cf80785f831f85ba191cfd83c722fdb5b905e6c229cc6a0b94e2adaceb3cebe6f53e8c9574857bd1512eef23f09f5eaafa332275436085ffb91dc4830c5c71e2ca48df9b21938ab692e4b56a60cfd525f4d4a86341f2b4f1dbd81f4ae558bc37e127941441ba618f1a6"}]}, 0x13b0}], 0x1, &(0x7f00000015c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0xa0, 0x14}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2330.125366] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:11 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = creat(0x0, 0x0) ftruncate(r4, 0x208200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:11 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00006b6b6b", 0x24) 19:01:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x40000000000}, 0x0) 19:01:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000106f050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001070050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2330.387573] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001074050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000107a050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010ba050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000060774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:01:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000070774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000002000000f6e6"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:12 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000fffff0", 0x24) 19:01:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x8087ffffffff}, 0x0) [ 2331.154807] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2331.618220] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:12 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000090774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x1000000000000}, 0x0) 19:01:13 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = gettid() tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x80000001, 0x65e) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)=r4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c7465720000000000000000000000e3ff0000000000000094d8f31e1b94390700000000000002000000f6e6"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2332.511406] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2332.533635] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007, 0x52e1}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="66b8000000000f23c00f21f8663501000c000f23f8d9eab89a000f00d00f01c90f01be92000f011c660f3a429a0068882e65660f013cba420066edba2100b0ffee", 0x41}], 0x1, 0x20, &(0x7f0000000240)=[@cstype3={0x5, 0xd}, @efer={0x2, 0x1000}], 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) fchmod(r6, 0x25) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x2000000000000}, 0x0) 19:01:13 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6, {0x0, 0x0, 0x0, 0x2}}}}}}}}}, 0x6c) 19:01:14 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x20, 0x2, [@TCA_RSVP_ACT={0x1c, 0x6, [@m_csum={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x20, 0x2, [@TCA_RSVP_ACT={0x1c, 0x6, [@m_csum={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x100, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8a0c76d5ee488c03}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x7fffffff, 0x1, 0x2, 0x3f}) [ 2333.198002] validate_nla: 1 callbacks suppressed [ 2333.198012] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000a0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:14 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2333.297163] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:14 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x4000000000000}, 0x0) [ 2333.694255] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:14 executing program 2: r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "ca375f5f5add336c", "9085afde8a9d29b5a5fc21cb46eac011", "cdcbca64", "c3a817a4bbab188f"}, 0x28) syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x404000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r6, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x9}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2333.923111] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:14 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000001d000002000000f6e618aba3cb6f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2333.982263] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:15 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000000)={0x8, "3a074c73888bf883293551065321bcfde33f51c8eb19bb5cb66f7ae82fd26d3d", 0x1}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:15 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='children\x00') ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6, {0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x6c) 19:01:15 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xf0ffffffffffff}, 0x0) 19:01:15 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000c0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000e0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2334.549348] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:15 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:15 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(0x0, 0x0) ftruncate(r4, 0x208200) ioctl$SNDRV_PCM_IOCTL_DELAY(r4, 0x80084121, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000f0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2335.079719] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x100000000000000}, 0x0) 19:01:16 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sco\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c55657200000000000000000000000000000081d2674701b2d8f222784089943a2c0000"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2335.294848] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:01:16 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000110774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x200000000000000}, 0x0) 19:01:16 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000080)={0x1f}) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000040)={{&(0x7f0000000200)=""/248, 0xf8}, &(0x7f0000000000), 0x10}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2335.555303] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:16 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2335.910380] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:16 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:17 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r4, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x4, 0x5) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r6, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x6, 0x8203, 0x3, 0xffff, 0xffff8000, 0x7ff, 0x0, r6}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:17 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000120774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x300000000000000}, 0x0) 19:01:17 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:01:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000140774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0xc, {0x2, 0x0, @multicast1}}) 19:01:17 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x400000000000000}, 0x0) 19:01:17 executing program 2: 19:01:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000150774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fchown(0xffffffffffffffff, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0x0]) r5 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xe005, &(0x7f0000000240)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_u='version=9p2000.u'}, {@access_client='access=client'}, {@access_uid={'access'}}, {@dfltgid={'dfltgid'}}, {@aname={'aname', 0x3d, 'md5sum)ppp0&'}}, {@dfltuid={'dfltuid', 0x3d, r6}}], [{@subj_type={'subj_type', 0x3d, '/dev/kvm\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'bdevposix_acl_accesskeyringem1'}}]}}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:17 executing program 2: 19:01:17 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:17 executing program 2: 19:01:17 executing program 2: 19:01:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:01:18 executing program 2: 19:01:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000170774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x500000000000000}, 0x0) 19:01:18 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000009000000000000000000000002000000f6e68a7d86e1628d58eb782b0c8b6fad87f0871461ff0d6424cdea384d01f36e83943ce7685fcc446b0acd265335728a4daea8e5d5fe349ff0019fc3bbcd62e061af20caaaa113c2ecfcb5c376cc6e58e2937271036a096f79a4c5e8d7546f8aa5187a03d512f89ae1754cfdf511f770114267e1cfb5fb677aeec2b122cc02ace5783f1264f6884d6a7a752ec1a657da1ff7c2a9e4e83213d384db642a0023"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:18 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r2 = socket(0x0, 0x0, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0xb, 0x0, "98d3340600c7aa11897ecaab876eab7957688dc5656be8410f2802e944af9b373be2666b66577017e1e49e64907d5dd5749393ad08f139a68f00"}, 0xd8) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0xa, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)=ANY=[@ANYRES16=0x0, @ANYBLOB="200026bd7000ffdbdf250900748070e573ca6adae0e3cbe53caf66c552bfce921b4b77001409000700c597e892c60000000a000600aaaaaaaaaabb00000c000a00e6c4e6e058c1943e5b49802283bf087146bc7e98a8c26c21a4b4191023bba6a9bbc1555a502e2b2660ba4682ab56277ac84aa8ce6da1912377c3ccb34bb6a8457429a9"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 19:01:19 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x600000000000000}, 0x0) [ 2338.976761] validate_nla: 5 callbacks suppressed [ 2338.976771] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:19 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010001a0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000ea3660d647f477d600000002000000f6e6c558bceb98ea5400e135913538c11a25ed0e9e2fedf6d22e40b50b4ff88149654e4baa3e6c332028ec995563e61fc82710b2a09036a017dd7e6c90aac3030000000000000049eb1d4b4bf9641c0437cb000000d7af1e488d895e169c5da893cf271093411be15fbfe1ce9a4193e2fd6ab2a3d6d3aa16485040d6e1d4941994164f771839dab6e083b3a0afa1bc552a240d218c5158272e1398678be80a0cdfdedcff4ef2cfc7e871aff0fd000000000000000010000000"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2339.070580] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}}}, 0x6c) 19:01:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010001d0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x700000000000000}, 0x0) 19:01:20 executing program 2: 19:01:20 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2339.210952] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:20 executing program 2: 19:01:20 executing program 2: 19:01:20 executing program 2: 19:01:20 executing program 2: 19:01:20 executing program 2: 19:01:20 executing program 2: [ 2339.596457] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2339.821910] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:20 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:20 executing program 2: 19:01:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:01:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x800000000000000}, 0x0) 19:01:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010001f0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0) keyctl$unlink(0x9, 0x0, r3) ftruncate(r2, 0x208200) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@empty, @loopback, 0xff, 0xff000000, 'veth0_to_hsr\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x29, 0x1, 0x60}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@icmp={{0x28, 'icmp\x00'}, {0xd, "d83a", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x1, 0x5, 0x7, 0x4, 0x5], 0x3, 0x2}, {0x0, [0x4, 0x2, 0x2, 0x0, 0x7, 0x8], 0x3}}}}, {{@ip={@remote, @local, 0xffffffff, 0xffffff00, 'macvlan1\x00', 'team_slave_0\x00', {}, {}, 0x45, 0x2, 0x14}, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000680)=ANY=[@ANYBLOB="66696c7465720000000500000000000000dd1a98d7100015000000000000a4091160f4690d72b41bf7dfa812cca5614661c2d0ae86175b1f7cfc952488717de87969dcbbaa4c4d6240e69811900af5fc6822b968da1ebe5f3e636db37007202f378721dcbe6fdff69cdad820650779ffedeee727002526008bb8c85515679ebc4871f7bdd2d1c583234e555d24000039bbf86cb97ed9f04f4e36a20f35f37b6000000000000000000000000000000000353a7db179913d7625bf62153c1552edcb71e7187de453309740d54df69dcadc5bb9cf6911f5dba16ede74d7c9c00fc49a10cdbba3c189408d5b57"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 19:01:21 executing program 2: 19:01:21 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000058", 0x24) 19:01:21 executing program 2: 19:01:21 executing program 2: 19:01:21 executing program 2: [ 2340.253810] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2340.287169] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:21 executing program 2: 19:01:21 executing program 2: 19:01:21 executing program 2: 19:01:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:01:21 executing program 2: 19:01:21 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000006b6b", 0x24) 19:01:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000200774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x900000000000000}, 0x0) 19:01:22 executing program 2: 19:01:22 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000140)={0x1, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r6, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={r6, 0x3f}, 0x8) 19:01:22 executing program 2: 19:01:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000250774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:22 executing program 2: r0 = inotify_init() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) keyctl$chown(0x4, r3, 0xee00, 0x0) keyctl$chown(0x4, r3, 0xee01, 0x0) [ 2341.540165] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2341.556315] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:22 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000ffffa8", 0x24) 19:01:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:01:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r3, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd6, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a21c67dbe3ec9ee6c2a3b818b0000000009eb2b5c9a610000010071e3a142a33caa6d0e35475ace78a33eb2b7fcfdd45d247a877bbcdd0307b91e8e05257ee498343d11310dda51e11dc0d92d614498a96fd09b90c0b306ef4fcd32316c48f327739494cfd766e8741d9783e4dc2a1cccb48f7d11a12e7714d3b2ab3f7e145069c031dff4e03cebb733218d3f00c1505b36dae61f9430afbad35132ad1172403fa3de92466d47fa032032453d60b2a1c1080000000000000095c32d"}}], 0x1c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 19:01:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xa00000000000000}, 0x0) [ 2341.780850] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000330774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:23 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000026", 0x24) 19:01:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xc00000000000000}, 0x0) 19:01:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1c7, &(0x7f0000000240)={@empty, @remote, @void, {@mpls_uc={0x8847, {[{0x1000, 0x0, 0x1}, {0x4}, {0x5, 0x0, 0x1}, {0x4}, {0x1ff}, {0x6, 0x0, 0x1}], @ipv6=@tipc_packet={0x5, 0x6, "e12a82", 0x179, 0x6, 0xff, @loopback, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, {[@routing={0x3a, 0xa, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, [], 0x31}, @private2={0xfc, 0x2, [], 0x1}, @mcast2, @private0, @empty]}, @routing={0xff, 0xa, 0x0, 0x6, 0x0, [@ipv4={[], [], @multicast2}, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, [], 0x1}]}, @hopopts={0x88, 0xe, [], [@enc_lim={0x4, 0x1, 0x81}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x38, {0x2, 0xc, 0x4, 0x3ff, [0x7f, 0x3f, 0x9, 0x7, 0x9, 0xffffffffffffff7a]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x5, 0x1d, "86af3389351540971fa99c36966031aa523fe814b5cbeb46e2a8c3d6a6"}, @pad1, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0xf0, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x8}]}], @payload_named={{{{{0x29, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x2, 0x3, 0x0, 0x3, 0xd, 0x2, 0x2, 0x9, 0x4, 0x0, 0x4e21, 0x4e23}, 0x1, 0x3}, 0x2, 0x3}}, [0x0]}}}}}}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xe00000000000000}, 0x0) 19:01:23 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000ffffff", 0x24) 19:01:23 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000ffffff", 0x24) 19:01:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010003f0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x2}}}}}}}, 0x6c) 19:01:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x1000000000000000}, 0x0) 19:01:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000240)={0x49, &(0x7f0000000100)=""/73}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000002000000f6e60000"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000080)=""/26) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f00000000c0)=0x6) 19:01:25 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000088a8ff", 0x24) 19:01:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000630774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:25 executing program 2: r0 = inotify_init() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) 19:01:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x1200000000000000}, 0x0) 19:01:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x8}}}}}}}, 0x6c) [ 2344.869635] validate_nla: 7 callbacks suppressed [ 2344.869646] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0xb) ptrace$cont(0x20, r0, 0x0, 0x0) [ 2345.096049] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:26 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000f0ff", 0x24) 19:01:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x3}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x0], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) [ 2345.165143] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x1f00000000000000}, 0x0) 19:01:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x3}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x0], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) 19:01:26 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00009effff", 0x24) [ 2345.602808] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0xa680092af7b0d809, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x23, 0x74, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000040)={0x0, "ca291cea6d113729a5a4b4fa56822e04e953099d00307eb6a041bbd430fc0de3", 0x3, 0x1}) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x3, @local}}, 0x1e) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{r6, r7/1000+10000}, 0x3, 0x0, 0x2e189954}, {{0x0, 0x2710}, 0x14, 0x8, 0x1}, {{}, 0x5, 0x5, 0x200}, {{}, 0x1f, 0x7, 0x9}], 0x60) 19:01:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x2000000000000000}, 0x0) 19:01:26 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b5d7f000050"], 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xfff, 0x0) 19:01:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000020774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x543}}}}}}}, 0x6c) 19:01:26 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000f0ffff", 0x24) [ 2346.041018] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000030774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2346.415206] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:27 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r3 = fcntl$dupfd(r1, 0x0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x325737a1b8d03669, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r4, 0x3}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000000c0)={0x8, 'dummy0\x00', {'veth0_to_hsr\x00'}, 0x6}) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2346.591189] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2346.631118] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x2600000000000000}, 0x0) 19:01:27 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:27 executing program 2: mlockall(0x2) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x8001, &(0x7f0000000080)) 19:01:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000040774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x608}}}}}}}, 0x6c) [ 2346.927671] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:27 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000ffffff", 0x24) 19:01:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x3f00000000000000}, 0x0) 19:01:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000060774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000070774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2347.194155] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000040)={@empty}, 0x20) tkill(r1, 0x8) ptrace$peekuser(0x3, 0x0, 0x3) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 19:01:28 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mremap(&(0x7f0000014000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x4000000000000000}, 0x0) 19:01:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x1f, 0x6, 0x37c, 0x0, 0x0, 0x128, 0x0, 0x128, 0x354, 0x354, 0x354, 0x354, 0x354, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev, 0x0, 0x0, 'macvlan0\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x0, 0xa9}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x70, 0x94}, @inet=@DSCP={0x24, 'DSCP\x00'}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00'}}, {{@ip={@empty, @local, 0x0, 0x0, 'hsr0\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3d8) 19:01:28 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000080774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x689}}}}}}}, 0x6c) 19:01:29 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000406010100000000000000000000000005000100060000009c0007801800018050000240fe8000000000ffff000000000000d20006000440000000000c00160508000140acdcbcca9c55170076650800000000000000000000000000050007008800000014001700767863616e310000a68acf58f78028740900120000007a32100000000c001b4000000000000080000c00148008000140ac14142b0c005b4000000000000000070c0016805f80000000f1133d0900020073797a30"], 0x1}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x47fde, 0x0) 19:01:29 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x4800000000000000}, 0x0) 19:01:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000090774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:29 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x4a00000000000000}, 0x0) 19:01:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000002000000f6e640e8c643193c9fb3edd378d3954ff64a0fa2b93681b327b634e07824be54c69c42bbbe76f9c3e49be65eb8f584c3585acb73536e673ac1c7be4344c011151cd0b3a05b078fab72814c609328b3b204393ce43c447e689aaef18000000000"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:29 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000040)={@empty}, 0x7e) tkill(r1, 0x8) ptrace$peekuser(0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 19:01:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000a0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:30 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x806}}}}}}}, 0x6c) 19:01:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x4c00000000000000}, 0x0) 19:01:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000b0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:30 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x10}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xae, 0x0) 19:01:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x1) write(r2, &(0x7f0000000300)="ac", 0x1) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000600)=ANY=[], 0x87ffffc) 19:01:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x5a00000000000000}, 0x0) [ 2350.011380] audit: type=1800 audit(1588532490.888:369): pid=32435 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=2913 res=0 [ 2350.081254] audit: type=1800 audit(1588532490.908:370): pid=32426 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=2913 res=0 [ 2350.172160] audit: type=1800 audit(1588532491.048:371): pid=32426 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=2913 res=0 [ 2350.267092] validate_nla: 8 callbacks suppressed [ 2350.267101] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:31 executing program 1: r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000020701020000000000000000050000060c000306000000000000000908000540000000071c0007800800014000000007080002400000000108000140000000060c00024000000000000000800c0006400000000000000196340b1403b1d860a0e59c81f34000078008000140000007ff0800014000000000080002400000ffff080002400000000208000240000000080800024000000004d2f19343c68ca16e0931a25a67d5da72978cdb2e57709aa9cf469606fc3d1a282518905634cf051465e243661734b7333cdd529028259fc0e0adccebffedb521e0a7a47126c5857e1ae1c746c0ac9985edc3368328c4da48748321502cb8808ce099f0e6b4a4ece0383c607e46a81c28e9b9a6ef91bc6f24f385585d78569e6ff18882d21f4b5d3fece3d4754f867fc391fdac2dd09bd1709a6300230adb4d04fc0cb995550b27dd17f9a70df60f"], 0x90}, 0x1, 0x0, 0x0, 0x4000004}, 0x6084) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000340)='./file0\x00', 0x80, 0x2) r3 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x2, 0x101000) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c018000000000000023dd0000000000000000000000000000000000000002000000f698"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f00000002c0)={0x9, @remote}, &(0x7f0000000300)=0x12, 0x80000) 19:01:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:01:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000c0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:31 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000e0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0xe80}}}}}}}, 0x6c) 19:01:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000f0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:31 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2350.679039] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x5a03000000000000}, 0x0) [ 2350.764791] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2350.994125] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:31 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000100774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000110774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x1, 'nr0\x00', {}, 0x1000}) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) mlockall(0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) creat(0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2351.338446] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2351.597967] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:01:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x6000000000000000}, 0x0) 19:01:34 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x3580}}}}}}}, 0x6c) 19:01:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000120774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000080)=0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000200000084e630e19ff04288ddf02d77602b1dc4f6b18a27635d2f178629d72fa39f872694f67a928a2e8e8f87f2f7bef55bae8170974c191892d45733566bb7ca60c010971ae52b3419694dead1729ce6547aae2d3cf17020e2ea739644e519bd19d714f8cbc203d578a859881a522706788de96024dc697e174452e547b5f111b28672518b2a5ddedcd25154f1bfe1"], 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x20801, 0x0) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x3755}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000140774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:34 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2353.491895] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000150774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x6558000000000000}, 0x0) 19:01:34 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2353.731762] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2353.922497] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:35 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2354.124368] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x6800000000000000}, 0x0) 19:01:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x3f00}}}}}}}, 0x6c) 19:01:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000170774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:01:37 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000580)={0x0, @reserved}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000000200)='ocfs2\x00', &(0x7f0000000240)='./file0\x00', 0x9, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000280)="1fdf4132ee648dd7d0c8f1eeb4902872c9b1b7f13457945ce0cbc8baf0bbdcbdc893fa5fe5c38ecdeeb4a9b8fb77058d6526bd6c10c87bcb63e1f1557a0b148fdec7f68425ea5b3bce43c8db8de60f416d754fd873dd5eb8a6a23d608acee8b42fed2bdaf97841920dc7a049edf661fc16c7284b798448d5", 0x78, 0xff}, {&(0x7f0000000300)="a28b892f55255e2e27a8058839332a3acc6b5f0b01a621711a6cdeeebd97254a583b8b10ba1589bb8570012df6036f8fd066b209326f3ab7cd46ee8b19ed5a8818a0c3f518710e77065f8d1fce9ec39a06c24ccafdfa9cec5d41f8bff30ff8f78ad22d31eaf864b5664770142541a08e1f1ad148f284a13da66b48d21e8ee2925a0de173547ae600744b9fdc1e69a992b63ee26d560b7a875fd3", 0x9a, 0x7}], 0xc041, &(0x7f0000000400)='y\x00') ioctl$KVM_NMI(r4, 0xae9a) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x408c4}, 0x40080) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000053b0a9974c611e00000000000000000000000002000000f6e6"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2356.523397] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2356.642634] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x6b02000000000000}, 0x0) 19:01:38 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010001a0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2357.269753] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x6c00000000000000}, 0x0) 19:01:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x4305}}}}}}}, 0x6c) 19:01:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010001d0774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2357.502384] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2357.568117] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:01:40 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x191800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r6, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x5, 0x7, 0x400, 0x80000000, 0x10008}, &(0x7f00000000c0)=0x14) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x7000000000000000}, 0x0) 19:01:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000250774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x4788}}}}}}}, 0x6c) [ 2359.634875] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2359.881566] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:40 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x7400000000000000}, 0x0) 19:01:41 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:41 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2360.123561] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000330774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x7a00000000000000}, 0x0) [ 2360.269800] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2360.483399] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) 19:01:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x4888}}}}}}}, 0x6c) 19:01:43 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = creat(0x0, 0x0) ftruncate(r6, 0x208200) ioctl$VIDIOC_G_AUDOUT(r6, 0x80345631, &(0x7f0000000080)) ioctl$KVM_NMI(r5, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19:01:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000630774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x8100000000000000}, 0x0) [ 2362.669819] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2362.708977] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:43 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x8203000000000000}, 0x0) 19:01:43 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:01:44 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000f0ff", 0x24) [ 2363.431407] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2363.454422] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x88a8ffff00000000}, 0x0) 19:01:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x6488}}}}}}}, 0x6c) [ 2363.837552] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) 19:01:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3ff, 0x2080) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000000c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050274740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:46 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000200", 0x24) 19:01:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x8ac1010000000000}, 0x0) 19:01:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x800e}}}}}}}, 0x6c) [ 2365.724013] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2365.754578] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050874740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x8bc1010000000000}, 0x0) 19:01:46 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000300", 0x24) 19:01:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0xfff, 0xdb2, 0xfffffffffffffffe, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = creat(0x0, 0xa5) ftruncate(r5, 0x208200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="66d168c79aab8e2a38f9f19120d53bd04b6f9dc41c000000568b86c16c50ff71eef721cfecb978", @ANYRES16=r7, @ANYBLOB="01000000000000000000130000000700210062620000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x934, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_SSID={0x1c, 0x34, "2a99ae7675dd76559da160acd4cb5cdf2a9536488cf6bbd9"}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x71c, 0x7f, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1e2, 0x80, "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"}]}, 0x934}, 0x1, 0x0, 0x0, 0x801}, 0x404c815) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66697c74657200000000000031709c80b5fa47d72a0000f6e6"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050c74740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2366.141708] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2366.149377] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:47 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000400", 0x24) [ 2366.224644] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$cont(0x7, r0, 0x0, 0x0) 19:01:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x8035}}}}}}}, 0x6c) 19:01:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) r6 = creat(0x0, 0x0) ftruncate(r6, 0x208200) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19:01:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x8cc1010000000000}, 0x0) 19:01:49 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000500", 0x24) 19:01:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050f74740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2368.770463] validate_nla: 1 callbacks suppressed [ 2368.770473] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2368.806568] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:49 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000600", 0x24) [ 2369.077377] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x8dc1010000000000}, 0x0) [ 2369.302633] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:50 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000800", 0x24) [ 2369.494235] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000051074740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) r6 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r6, 0x0) r7 = fcntl$dupfd(r6, 0x406, 0xffffffffffffffff) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f00000000c0)={0x3, r7, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x8ec1010000000000}, 0x0) [ 2369.833854] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2369.938451] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:01:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000051174740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:52 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000900", 0x24) 19:01:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x8100}}}}}}}, 0x6c) 19:01:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x8fc1010000000000}, 0x0) 19:01:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x114000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c746572000000000000ff00c7150000000000000000000000000000000002000000f6e60f08000000b9806b4e3146bce84054b88c93ff557116f74f974e23a2049c52c0f428d55b13bdd76e75e79509e9c1b2612cd0a423f43eb58c584ba7adf8023f78e1a17c8fcc1ff67a837baa83c064ba220c9af1cc6c015fa8e2aed4217292b2214b202aa9d3f4bf518dbaf9d23b2fe577479da26f58c8273588152f5c56f90591fafe0a42e650bd"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2371.849097] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000051474740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x9001000000000000}, 0x0) [ 2371.932170] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:53 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000a00", 0x24) [ 2372.204377] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:53 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000b00", 0x24) 19:01:53 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000c00", 0x24) 19:01:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x8847}}}}}}}, 0x6c) 19:01:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:01:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x90c1010000000000}, 0x0) 19:01:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000052474740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:55 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000e00", 0x24) 19:01:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="665c8293696c746572000000008b0000000000000000000060b2d16da1590b9677904092bc93f000000000000000000600007a7a5c6d56dcd10d06098431c831df542d0ba29efe2882fb02c8e8421c00006e3a1841ce37dc0000009dda075f369afad80a962dc10c5a859dd5f67644bb3126cf62e3a71034638ea94df6302f0e676c134054f3b56fbdb540a3c0f94c60409858fe70a6c8a62e80d1ecc59c7cb26ae2"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x8848}}}}}}}, 0x6c) [ 2374.902756] validate_nla: 2 callbacks suppressed [ 2374.902766] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2374.949737] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:56 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000f00", 0x24) [ 2375.321654] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2375.688470] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x91c1010000000000}, 0x0) 19:01:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:56 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000001000", 0x24) 19:01:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000052574740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2376.262351] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:57 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000006000", 0x24) [ 2376.339760] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:58 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000f000", 0x24) 19:01:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x8864}}}}}}}, 0x6c) 19:01:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:01:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x92c1010000000000}, 0x0) 19:01:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050725740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:01:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2377.967762] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2377.993406] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:59 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000003", 0x24) 19:01:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x93c1010000000000}, 0x0) 19:01:59 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000005", 0x24) [ 2378.472776] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:01:59 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000006", 0x24) 19:01:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x94c1010000000000}, 0x0) [ 2378.716166] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:01:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x8906}}}}}}}, 0x6c) 19:01:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @loopback}], 0x40) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19:01:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005076d740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:01 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000009", 0x24) 19:02:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x95c1010000000000}, 0x0) 19:02:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x1000000}}}}}}}, 0x6c) 19:02:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774250000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xffff) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="748c8900", @ANYRES16, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x20000080}, 0x48040) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000009c0), 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x4}, {0x5}, {0x5, 0x3, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1ac, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeac9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71803d60}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2930b74e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xee4b04c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe11c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7126b140}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bab8da6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1feecb39}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49cd3148}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3185e389}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x485f37b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11274989}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4906}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x534b317f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67a9ac8c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2867377c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d09aa55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60e72ea6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bf8a189}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd243}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x444b3a1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe798}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc58eeb6}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3aa5d473}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcda0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2576}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3253396e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d9eb974}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9015}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14cd}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3696}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3486a838}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5051}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2381.015265] validate_nla: 3 callbacks suppressed [ 2381.015275] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2381.071634] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:02 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000000a", 0x24) 19:02:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x96c1010000000000}, 0x0) 19:02:02 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000000b", 0x24) [ 2381.658638] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2381.683538] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2381.979554] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507746d0000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:02 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000000c", 0x24) [ 2382.085451] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x2000000}}}}}}}, 0x6c) 19:02:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x97c1010000000000}, 0x0) 19:02:04 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000000e", 0x24) 19:02:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774c00200dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c746572000000000000000000230000000000000000000000000000000002000000f6e6"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2384.080128] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2384.112405] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:05 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000000f", 0x24) 19:02:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x98c1010000000000}, 0x0) 19:02:05 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000009426", 0x24) 19:02:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774c00e00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2384.642064] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2384.658924] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:05 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000003f", 0x24) 19:02:06 executing program 1: r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) sendmmsg$nfc_llcp(r0, &(0x7f0000003b40)=[{&(0x7f0000000380)={0x27, 0x1, 0x0, 0x6, 0x5, 0xff, "5c1159808efb5bc1a403010d5f2d1e00ed565a0ef155fb6a1165af419ace489e0e112212a979a03d7ac27e841e517d04b10fa18a68322bc7453ade107cc04f", 0x3b}, 0x60, &(0x7f0000000640)=[{&(0x7f0000000400)="42f53e6b5740a9561299c2d4cd46a3c2d01993569d8120f6d47301c833197a6bb531244fc47412052ebf2f81a0d44cafbe6ae6e8d4cd33101e5d2eb5ab7979d3da7d5dfc78c0d09c79018c398c65a83e549c45", 0x53}, {&(0x7f0000000480)="9f7dc117bc7ba6a2e3df842cbd90755c1c7c2db47ab00c56cab6f0d0abd16cc86167bf09b6f709b72ffda9e9fc1c5b2ba4c830a70aaa86b2096de4997c70b28931715e73d4acbcbd90c21ec02a", 0x4d}, {&(0x7f0000000500)="ea1c8606832e4a4878b9545a6f1d32e4770ce7224e94071e39fdbd2cbe4737e35196fda04c8f785b92a6e63a414bca07f4110baa08239b83c97f6fdfc7578f1b7dafa4874cb73d39c7", 0x49}, {&(0x7f0000000140)="faf1cc94e9fa2fe63eaba63ddd8ab1c93fbd530cb504a4f192ea3a8c56cd28338ec4b806a606f3a63ec4965f1b", 0x2d}, {&(0x7f0000000580)="469744fa986a19fc043a3c42d50a468ec1a2c6c7e102844c651d746cb233f5881da1210258a84e1b73e78fdaa26dbf76f5da2200d8b00ce072a26e65bb6878b470234fc77ede5d3b0a2db1ad33181ed8a483a4e476220c23ebe60d1ef74d9fdf4c7223b508db8ef2d40bdaab2badf4104f2f7406b7d5f71c5a8f086853c7488655303f3cf7e4f4f79225db329e73a2f970591d19a9c250ffce", 0x99}], 0x5, 0x0, 0x0, 0xc0}, {&(0x7f00000006c0)={0x27, 0x0, 0x0, 0x7, 0xda, 0x81, "6c7bab961f0f4d41d3b6adb04e0991d6f431355f24b5d7f1c7b9bce522f78f59cb14b6cf39cf081819ea86b01d0f8533ecedacdf9058da8860acc4a55c0015", 0x3c}, 0x60, &(0x7f0000001a00)=[{&(0x7f0000000740)="35520cbb7dc375a577b604548e65e03ea777d6838cec7f91e5baa6914471496d2e66552db55bd485be4e2de563fde24c1acb57ea49ceb53fe911288c820b0b0ea470be52525f043d462c19e849432868f7b6e9a4e13ca58cba59cdb6b786c8204057c52738bca88084547f052b510cc8ef45a231d78456e6f5b0a7a7648db2a37edfb9b9fbb07239c8be12239f5f8a", 0x8f}, {&(0x7f0000000800)="96d777cbb0db14771319ffe28e51fd46052973900ad123b7300916af0b8d77469834bca38194ce88c6a55e53fd45ebd37810fa682a28383c583d", 0x3a}, {&(0x7f0000000840)="ccff97ccd50f14053f79ae18790f470ef99e34f2091adeeed333f0ccf7fbc65f51ced7461ab0d1c364493e8577921cd32ab4b9b768ab1e0997bef82733a913cef7aab202b042c97bb2de3f1523818957", 0x50}, {&(0x7f0000003c80)="710669ca9825cec244585b832f9d79e46bfa1e47460e12141c5618f1c19a53c0d24a9188934b9f041c0425c9a24f083ddbd84f5699407f1c365f770ae6ee30d9b96ef1475a19f86d8dc33ed528e92398ff1442aca4385a27c13e7c202c2fc8c8f5ae114927c44cb0191f5cd4b0026bfcbe16f406de24e7fbd631fb44e22eca2c5ca2fa62b1bdf90bc5b2f84b55b2060521931c489be57c4f64241a66de80932e1b9050173389fd22500e2cb4843d81e3b86c078d8e055bd6b0fb3741d16de5a95a1dd5ded2b39ca2de5036f37bf297089fcb1ce14a7505931e7fe52d130121d3ecdff1beed42bd0a045d04257e753166414be61799b42ddd0875747dca7ba7f9bb938737fbb11102f4ed1449431492f688016035df4ff408924d70756eb54d97f3f02e0b35f2eda26df6de789e8640b0c1e8308dc3c2f463cf687b8e58d8a215f8589bc4fb11f78470c5c557498d66075c455b70d83fd49effd1348842565079c6b56f16316287870c253b5e6d46fb1fb33f7dc68910d5743c9c2b67e25572294f1076f943255000e41f7424addae5b4d13edf9fee6b17c7c17c38c16c9609cc2d5a50c4c82039fb559076272ecec63660f214a6fd293aa4cab49bde58021c3a9cb31d7ac756c46efa4f5ac12787a87b80d1e885b9e62aafbbdd33c54478399c31125c26b26e2c369d352ff1ba8a47ba08a9837353bccb83af63b1016a6a49a9763cb31140d1f1861bd9edc549c91374cfcba88d767460297c03342243e14984ffa2df4e081240c1008d14d0c63d8c94b2a3c1f1707e31731aff12b2a3523ff7186d06392481ba1b97787c4985038aa4c53b221776d9500ca7f24f1c031d1ed80dc610f396a70218f75a556326bb3abb74e5fcb5254377a3de2516fdf8c107cd6a45c810122815f2796265ceb7eb934e029e660f39c34186605b2a5b13ddb49e22c28639b9e6d9a48a005160ab902f09e07006f4fc2247fb3ad1b1a256f797bce4713b3c6b49d953c326884ce1c3ffdb5191bafc9fae519a9ff6943deff1b3051e7b339a42b3f2ef61b42989774b7e5b304d5af80b2fbd915bb79b0e714eb9634b58c0b7fc50de1b91db17363eec4d01167ec941179ca8a281521abf332f736e91a4aa7a4013173e7ab2f7b015dbeae8501b8429c30ea55e41e6ba27d2e8107974a462af342d8935d01e259127d4b88042ff849fee525fc3910cf646c52dfd46384d721dc887dc44fabc3b92319513a6da6efbef438bb0946667cfc41973532eaba3f031a812e6e49abc9db5843971c9b69ad28bd3068ce45bf4f0bea659008ba69e6262203048b24c25b374e87ae411e37e335e798d85d876bf8993b7fb0af5be5087385784aa5421762f1fe952174afb6238c54c41be16f0ef8e6ba154ec4eebc78afe21efaf35ba141a4118d4a68543fe1a22055a7bb36c9a75951f8118acb680112318452a1222d1dfc9dc378419555fffbde037f4a8d02dba70385b26e9b534f89197dc0aa2f1dc144147dbabf33f792a63616bc2d21cad783c294f781bfaac423697f044439371d775b21aa21822f717b56b00b13899821f90fb707e2fbcf611c571e0d97a9c7fd13f10d9a1cc12e0dae99228b158482edf7e747a1a1248b9bc0402834db0217a389602a60805d26d9461b0d98501e4ac6e4107c4308a37bcd4f70d8e22235dd83d76c131fec6c7c8b5d93c703defa49b42b6910653f2d7f371ca067ba67c33cc23af4ff2b77edbbb05ac7cce278879377327e0f120818fc4734aee6133377855bd465735a2efed52d6c3c162760f91e5702e1fcc72c947c937d408dfff05b4bdfb20254f8bf91cbc750e46604165e4d37336c073f3698b919b6a07b98bb8cf58799c333836787b6f309740e977aa99861a0333fbe0ca6f73136d17535b24874536f087a8aaa86855a44e6655819ffb2f7f48c36b7ded71e3ae14054a1c4214b1b85d7c497194ad863829611a825bcdb63f046f83473371bc5b1bfca9672b0b3fdff45a5e626a2ecde38012a8e18e96dca10a7e12207ca9341dc98f390f561f0a3e9616c0457389bc5cc24a6c51b430531e03a4be7837143ae67e6118b537abe02d734ca4ad2d60d3e3b455b7100ce403913d23a2206321ccedadbe63b3c14517edf86151bbd61c625046517a468f2b691464a058c1498d50b4f7f40a15c235445958a804de56477b28b1628db775c53d51b21c2f454a49a4f5cc93f0b562db13f25d88d7beefcbc357e8acc6d07ba75ec41bf120862140056d5187ef1f31bfb3c833d8d98023c88a9519c79207c7befcda5672a05460297a78bd949068a371daf85c804885d34d71a18e4bfaf3ec6fcf21f1b9a33326c9a618d0056bbd7438e2f886df1b7786ad9c20bd86bf7c83d9847b0844d2795c1670047b7057eb75006e515325202b4373c0e989ca4072a8d93f9a390794ef026a9b81cea223e7ee3302932fdc458b8b18ef2478a61371fd668a5fa2ed67b6f6e61dd8e538a26832871c9993e32ba8f2d1b62d9d874464986eb458f5bc92dbf293f05a5dd4739ea36769dfd5969e1f88124329f06832f9b95d77fbea5ffbf7b54ab8452f2d080aea42e8eda1a5d3ae20054e50729bba792f9a4f3bd24ea9594eb43e0d454adffe48d165a41c50930f747317c82fb4fdffb0172fe2e8004ba2c8ed005e9ef9c698bc85ba1d00a5fd99711d9e89be1dd6f64c77e510b9d074b21065e9dca948d6b2c245e96b5429ef1bae96f93e58b97c1656fa52e62b81c0e5e6fac0093810e1e303c80f7403b1ee7ae2b1bbbf6ad0f2f7e6a47fb715bfa20e9d2622d4efd3e683875a929d168279299d88a2c4e2e8247eb5a5730602b32379fd48730a21210e3e7c3d457fb9004fd1e5c3ca9eea8d1a31ff0e292717a603a75127ee80bdd7979b84a2ac4a6fb5010565aeefb2a4ca2627cef7866c83940ed533c2f8c18b091d6aa59a8bea488e0d2958892e6d9ae63d15eeeed3251043c537d0ecf2fc0fd54f7cbf4688479c23097f76b004855fbf906f2ab1e5ca457411dc9dc4280ebd39c9c034f470888aecdea2e94316b1c02cb03c5dfad66d3930ea48e215136b1cafd339d15f694299918e647dd3bcd2886f18515a2109045c74b0115bb3034bc548d9aed50ac285be0402e4ae7090dad1ca18a8a200a365e7a3064fa35c2a7853fb399668c19ddc375e44765c0ec7b120e9c6d2f2577b8456b9b6a0f243a172c94ea698b7979df9e61e2aaa2699683090e09e911701b94ec48b7aace856c7450e42798f326d607d4c38d2461b1210784afd4a4074c33de65103a5036f002fbe55c8b2155bd08ab548c9209aee22e770679e7a1ad030f92dd8af450310756113a53d4f6f9c0a8767093becb808871a9084543ae8eb739f7d032efffc12670b625ad25e34d69391ba61e3939aeee0ee1876f033831eacf05be786e493eca28846dec9369b7f46e777120dde0b4d31658507d72802d3209b3c9142ebdc18bce1021c686e6123c0c62655f0842585727c3300c34789c504ecaa850aa6cad1aecf2ed39863d42d5c1da30be43c776d42e6e89629f1850e4dd156acac1055db46eb70f9f69c8917dbc2cfae45d56436ec82f92c4665fc92097dc87ba60311a5e6a2a14172c4a15a2775bcffb2065d5ea415311501395f34b124753cef476f6d3ee7004b3180d29a06605369cb2d438c12c512a6794768baced78d696c421de2612c089276ddf75816b0b32e28802bc7da144ca1c06f4e7ec5329f0d0de33ddff707d7671cefbe8a98be0e33053464aa021aaf2c81fa2d2c5d00144f70b9c75de7a17921935ad81ea99738eaf5af3c1d1b10232d1cdf2489526cf8bbd844aff7402e755a5654e8485c6837609bc2618d1c4240c2add79813088b0b9a66cd21e9ad813a6cca847c7e368c779763ac900de860905b84d4c1ce04ca57d3f62c1f8d80ae02976962c2e577906be73a108e28981873e01248f7aa21e01f445e5630173a38484105f43a06558f3ccd7d8ab18235c1746b591b66a1fd8d5c600502aab9881c692c4f98a220d18e5cd48165a37e34ef08ea12037329168bb60d1f6b20872d848f614c11feff58c8beab941668b64b92bde83007f5f81164743fa8d569818e1f228e1b4fa1bbde427fd7df53ff50f06f52d5b25d6481c87f1012d909a465d9c06f77df9656feb71349dd6f0aa7e9445809179cae2b0918d66fe730f8c0b27e2eb6617c8c7c2f11ba7534a7904d3611d0b2c9943e405be8d96c665f97d4c8987e9c1320e2ae2ba4c3ecef2e00bc01d7c6f72a9f4da2286e9274fd7bf79932962e3f5a911f5307b67cdc64b2017a50f305b5d9c06c36e380b421aed217294a0a9a35dc4e736cb77147350fc883dba3946d380b898eba3ff300154673485c605264950cce2e49c3bfa198419d7d6fed9f70b3931ed4a6eff2273a08e4d640ea69a5e9fe869c1b4fece539fbe284a10c0927b0d5c649a4087d204465afa6bb4f59ecd430acd2621c6ece64274505330d97c03524c87a8353df547f6e1f4fc13d38f0bb845684f76ae11be8db3f1c95b62aec67e8be475125d5457cb5208dec09164cea7ff5930641b9cb0598685bc09ac6cad076d0ca0a4262b0c78217e570443ee938cfb852c9d81af60c719ac341d7e248ab1d0e4d0e0b2bb9125ca8f65da3a251e88b84786c4bbfa77c6aadb814b442ba5b5b3ab6a9a673ae37b5a862f8ba7e685f0b2ea8b4924cb814bc7034a5458c4b5ce2b4e68774427ce29bdde96d8924ced90290050df0cc6a9779f3045645c0e2bf19e090fd4d8d16758e6ebc0aef9ba2081df6e1ba1e7f5e0f751972ffd902dd85fb477d463c2f0b2a9852139cdb455169b6c90150f997baedc2ef6128f110ce572d4b13745fa9cb2e6a29efbfbb2a00ed84bd6a9b55e13b2800d3c2cdf52c40dbce87c9ae0ef5972908465fa3c33bb94db3fabd47a9ee93f010cc8844379cd4341b87ea8b18a62e0aae6dd1dc4fb9e959ebc57285e885e188a7d6163660b491beeb2c1cd391572a09e57b3f281b9751bf8ab4644bc61e7497826650e0a1fbab69843aaf8184222f8eac636d6a93e3f81bd7e7b6e6ba60e9e2de45f5990a8b3131f44a6e049d6cb81f735445fc3dc4295e7cc562122b382e6b119c99ea454f1cf87850322d7c83416813718c37ec74ff3d51393497b4c96a7a288fe90dfdf5507cc9892dc43bd2a10ce28c42bd0a7337bad46fb435b884651bf21b2eb730487d5df245844143faad00610a4cc17b55a6da265c94d73301420ccce799dd5f2cdd940b5963598e7c1b440cd713ac379a153f616aa3199af32f930b8de76cadebec8e14fd9ec5c4ca32f8a0b688d89e247004e1ede906fae60a5550b4a0de740fee0e216649c5653c044fa7f797536e516f1514702487b5ad4006480211f55308fe3a7ed2058a210b9b2ab70f535af6eee62a5e1740f13b4f27c7f7072308315eb46feca2f1f9486b286bfac4b63ad7f3c301ea4714461f93792aba37951cdf8670476ccad46e3ee44a8b1407fa3d8c9637a87df1bc7eed23ffab16cb864179a7d05b7707e3db0b62011f238a88a38b66555baa723ec011f4e65d7d1631884a55d01a6ebaf62878346701f8db89b7dcff2280edf752750eae9226f4666092825e14bfbbb75ae2654a76d07b88f289780235fb8aec1382d9ec8c915e7fd7edaf15201087dfb1e049a51dc7e61e29c3b1fe54a258164d985c7eb8f4e801df79e96c7c9e50f56148b0c515747f40735c0875fd73cb8c019ea7a06405226ac58d80ae2c3d9dde1e327d4dd6494ca8a6d431", 0x1000}, {&(0x7f00000018c0)="343b19af78b5fcacf640548af6cb2301b148a359976a5ad635c8e472c11ab7a0345e27da7e29f3d04211fa17ee68b2af2d071ba59e499c5fa5f960b1b43145fbfcd1159a8db37bcdf165e79c3838ffbbe22d7341a01cb2ab0e8436192472c2a7432eed9e3bf545df651923932ebd9849a61877db2cca1359b2c3136f4d73b44ddfd0cd2160a7a0789d92c6ce06f8f89bd12025cff85017a597819d4d06829b65f9ef4e0eabcfc49e606496ef7ec87efe85b7", 0xb2}, {&(0x7f00000008c0)="7af96e1da03ce160e6cff4803b146964aec110e314d65a0c2e5d0a5c46e7dd80e47c27d5d15791930a7f19ff35c35acf8f46a3fae4cc9549f2d2e15c191dd388e60908cc2ee68f1bc3e571dd3617fd2895ee8ea740f7b826ace0", 0x5a}], 0x6, 0x0, 0x0, 0x80}, {&(0x7f0000001a80)={0x27, 0x0, 0x2, 0x4, 0x5a, 0x9, "83789ac7d96568685e7ec61f528fd053df50e561b7efb3b9b36bc4cd015c37a528dd33dd44bfde8a1e625ed3231faf90c8e4a9b3328c6777d9e1af4a352735", 0x29}, 0x60, &(0x7f0000001cc0)=[{&(0x7f0000001b00)="8291ba5f966fa5f4cd9147e0f2f5bdbb2017b43e0b06ab32b48098cf53643ea0768c8d9e13f2f7fc2e701ec217f4d6dd126dddca5a70acefe829e9082156d3242871c478c2423ad876844f29863630013eaf76648c9eccafbaec6ccbb2592eaf4a3e3a52663f2530738060c745b8e34f015a54c631dfc0c34d6a4ea295d6bee294f5dfb1bf7ca85443f1b423c61248a6756d5921405e4473c601fff8c55214c0f481fd6c5d5c319f979e42f8015e2a0420f950e3ff6254173feafd32afcd", 0xbe}, {&(0x7f0000001bc0)="65081dcb2d7b889b048c67e517959c1ba53d850c1d29289c8d078b21c00f65a000e6b1d4eca2d4d47331cfb6aaad2014a6767cb619ea9e197297a44e822f79160e710fa55efc35a3519e32426339a1ec8aac60fee00c059ac7f1f994233bb8b7f22d4ecbbe8279231a6835088b64f983a3ffce3f30a5a30bb2a737e789b77e20405a7b064fb68c55014c7c37deee1dca41e8a0a48c56948a3998bf76faeb7de00e7c97c4333e454d4cb23ad2aa51c9806a64094ab657cac8f41dadcec7544948f1a8637201a45e23b2003e215d54bd684ca62e0539751672e42d9684ade23d26b082c286ee205457dbd75a04f4ae5ba8d1d98eff", 0xf4}], 0x2, 0x0, 0x0, 0x4800}, {&(0x7f0000001d00)={0x27, 0x0, 0x2, 0x4, 0x81, 0x8, "24435c9cf6abb9fe0cffd1a25a4b3f5b7a157301c42a7f9a3e37528b237e1d7ab20eaff614bb58d99528ef19f027feab087f9533fd2628d797fc7db6079ba0", 0x25}, 0x60, &(0x7f0000002200)=[{&(0x7f0000000940)="51b7a4b3478f0085b84f64f4f49bb55668da46bf26eec2cda6c3ae5f08154e563d3f0eafc06b66c8556790846bb0f63170554803299d70ae85a17f104a812425d21a8ab534b50c95954d879e7066f3c5e51c069f104bc7550e0878fc42b2853be6b734a2a5a5", 0x66}, {&(0x7f0000001e00)="bc03d41ff08c880cba2294f5817d2e2cc469714012ec9bc20db4cdb4ae20ec9d140f60529eda", 0x26}, {&(0x7f0000001e40)="89b332a4f999e3233fce24984fcbff94a855abdfa62854ccf7c4edb582a0c2fb9ca779796b7dcfd40a14e1e356de1bf5e29cd7227a919c7ddd54f02dc50dffc968ad60ff50fb13df5e205c1f31dd794b8c81a9219bac5f92f577106f197f2621c9bda6229f6d88b3ff2ba1b1729b89e49b1e313cfda5fec3259bdd06cd7f6eddd864c3ad2f006c6a235096c86f28883790f06d470369442279c74aa62ec0eee28d90de398275", 0xa6}, {&(0x7f0000001f00)="ef81a05447cfa398ac3ccb89fb", 0xd}, {&(0x7f0000001f40)="601c4f1ceb17cbaeaef1ec6cfec2e4194620ea8a0d2d1b2492030ace6b55dd47a8a2e5bd38e21e9ebe5923c6a712a1c2538aac458ed489f10182124cbf17cd69f6c7d59c26338284aeb8328f2f6934d9439e97eb27f3fe783405fb2463feed6ef626ee6144e8ad626fa9f52897d1b73ef8694cd934a0001dfafc36e1b823fed9448af8553a0bb1798f7f15492b145f03cc744584a0e459ce5c5cbba821d5a2", 0x9f}, {&(0x7f0000002000)="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", 0xfc}, {&(0x7f0000002100)="6a4f8548476e0c000055558b441470035f4c73bf92e86cbdfdcd9f756c6909ad9d2ee6a66e24a055d901ace296c335ce71946d323999b04b399fe71dd71f48600c5ff70569897689171039d6826051f1c31cb3780d", 0x55}, {&(0x7f0000002180)="cf06ccb54455cfee42ba5ff63fa39cb0afdb5442cba7632ce739b427b699f570768be18b8c3a7376845e8e244b7b2042a46ef2df8f71786fd551fec92a77644892832f1c98a8cb87f6ecb12add0582ab99ac3626801c92a7ce58c8ac5a7cc9", 0x5f}], 0x8, &(0x7f0000002280)={0xe8, 0x115, 0x4, "123aee6d29a5d0c38b089636f334339f8aec688ca1934e38a60fb41f8b9666e40d669adcaa2bdbb8bef01627160a2f83a96fe0c31824c8397ddce58237eff39cc79acc6e3761cdcf6b1a19675eed56777946bfa211fb25b85378b30b96f2c0915c6cf55815b22565702dab6173fa766286a78b1e9c8cbab9d0e07008bfc7c7cf79e4b2292f6082cafb7ddaebbda591ffdb5f37e6d245bf310f7861274e99821bf38f205e54d6f0a63efa053d7b34262ce6ef1b0231dfc19e0d63b835a1bbfe7d6b3a2ab01ac5f6e5237ffc190c5f8bfeb0ed7592e1806711"}, 0xe8, 0x840}, {&(0x7f0000002380)={0x27, 0x1, 0x2, 0x2, 0xd4, 0xe3, "f34f7e8809ba027bceb9e5ac1b18f511b2e1a318c9752687fec7b40d686ac367a94c03dd7cd2615cfe34fa066b17f7c86116452c96e7e568c6fbfb620ce59a", 0x24}, 0x60, &(0x7f0000003a80)=[{&(0x7f0000002400)="84d2fb29f14c5bee6410f04a27bb73e44821de4c5825ca6263b4421c098d7abcfd6d265f74b944b9094b68cf5c51493c9d9a16f2c9355d508a5f355ae0173963e067cf62680a1f3c30550d2bd946496b38e7279a4a7623e965869b0d41addbfbde5b22766613a804b3daa91acc9a0b8f71dc328ba335d19886a7362931b605ea75eab9ac14bc42c85c266b5690673a64ffaaf2ba3e94556216d980f84e22f3a340f4d6359d7ae44465bd27c6bd4a2ea596419ae6958f86c13839927493e15f790a2ce2e7fe7c3d67c502e798de4ef6effc891a0ef785832a51796ac83f50fe6310479097865b0f75d3fac92efd3f6281e093b3a13d77e4f3bd14855f9440e48fc4e28afa01509a0cb49d8efbfc9dcbf4fb2aa3beb4fae292e2984490d414240086dc6f16f267d9e9eef91b2729702856672948df1d64d06ccf147aec78cb310d54c2634f6fa51be0877953d2227ae4a89a41349ecd8323869b1dac84a42006eb7d330de0eec3292f8057472c6aaea33310918187e694be0a77ad510ca17325292cfe96ec5c84a5da584d6f06a215682f19d66d83a791962e8501b86b32ef9f2136446924c9b7f67db0b05c9bebdd4252f716e57c73988022c099e353acac6631d6750338f3f848bc63f4380fe0cd0b1094cf23c80a7e785773258de548ccc389d07cf12b0208aa988e964e7e7bb4312433792fc626fbd18ae23ac1d4ba0625f43f72e678809c84374c7d80b02518da9ae6ca567afef5a01894be579177cb57b1a0174299d067db86abab0e6a17d3dcd90dee47337d9cb4dcc66acc7d8328a4225cd2403fa77f7b159966fc5f543ec72c6f60a8fde9845fb5daab64b6afa84d697b956b25eb297187978b67d34018044f0d5c806505b8258de3c37450bae46ba1a037f0f5402b4dc855df7cad5deaafc3c442f05f21b9d4303a8ea84f1ddc784996e839d58dc7cec784932c91b27c5bd7095edfb49beda15b034cbd9e49c6d821ad198c4b8f1b9c33fc69b4b0eeb73bd70d0901a66dc590ce639a1e69c6e6b881fb4d7c37844d46d47ddf7b1e4d8331c233c23630c0586ac1720e8e9ca06f57711809aecd410b40374809007e1ee8abbc35da587b08065dbc70def213918492e4c6c9b155f73b5c651a7c5636df6dba533aba253a1e53922cff16744dbb1636ec209e86ce8e8d1288d79099c9bce5a984b510737eb78c7239291ec591a039ce8c0ff95baa4e8390135269a661547b9c48931e542020cdbc5420db1c3be864198a2b7d7373cddea21387feea9dc0e23ad2cae9170e5a11981cdccfccf5798ef70486289260053d995baa8d60cbc90284138bca870659b14d6ae43017d1b1b868d90b163fcd78c41c22b24b79284decfae9b22ea173df4e2513e04e76552314e168d5a4f55d2b139fe91cd2a0c17f2f15d25768d124c91b7bccd6354bae0eeda468079de7ffe8b6d51b71ceaa7a79e3c14f88fd852166c12d00d02b5dad2a841a823138124c7450c2c1b1a9eed2e19d9527b4ea91bbd36f92d08ba8619f03a2f78ad02ce62842c9ec20c24e94f002ec3a69655064acc96017f4c2986453cfe1dae9f79c88f31a3bc3beb6aaceeaaa7ad4b556657459a0ef9b25d2aafa1d2cab2c3c60d6b72487fb5468ff2f46330ec43d267972b0f01081bb687e547b6ec6650497a40b28be8dd6263182d92f213441bb66652e267ce464f274060e441073166b00a9f6f07230cb39e4f64c0457eab60776358c7b44859d52ffe5269c330cb88d9a20a324e29e2d167bf35dfbd33fd3d7a6abc6041716ff43d977c522be9df878abbb903e5feb98e2ff5f03c7fd2a6ac4adc6e65182ed8911d9672f6df34151046f691549153d02f42a6a84dc4b65665b288b33df8011051e265bd013b4b9991e9074302116081a4410b006c7af2234652b4d075ca680ad8a5e2f51ea35605a5e5272131ea6b80a975ffec217823c7b9d0fc3501790fa78f8349da9bd5f6f3c5f9b7e07bb6b95fc54b6a128e0d98be6ff67f78511d6781928537e747d014945b15ec4ff403f7e220993f9181d37546feabaa81889e04a000f504f476acf5b02cdca60c1d97400747845ddad6f988b105ffe1ffe161040ed1f5ac01288ecbc034133f3a8ff482328b1d9fed0c45d15478b588337b27ff33649f34ac052756236d85dcf3d260955b05bed67d790ebc0220c0476429797103902c72f77d479b59343d0c405b4c94709abc424e057bae03b3bb79e0a8829646316d578e0d9ff5f46cf31cc81910a93b1ee3bf9fb9192e3ce6b76f94554eb3184e61a46fbb5d59cc79c6cc83507445c56c8fb2ddacb641921a9e650f8358468e50a688b5c6f420657fdcf48d59d8be0bd3aaadd8b7c9ffd0564148510c38eda27cde05f03c7e37c8271cf93ddae549f643aeba212647fee83ae16ae29ac0aa09617cc2b5d6bed192e58e156300ca41b0ebfc6fa1e32144a2fb72430d41b79639c994aefd8cb9c43b84dc0d5d7239e0c95551f89074597b0fa29baa6a49910cadf91302e793e8ac21ade3063acf63f551967cccd79e187b61d9d3d8cf5ba0a6d482462fcabe804022b22b5fa66b5c8634a1ef81333cfbf2fbd09785c3f4a3967990991ebc11364736ed55b5bc2ec26567bde0a3374b419d337ed7af8d199a80ad78a65001bb92e8b5c7a270737a440841483461d0df8e03f617463531ab7f4ce6e2f302b9ace0db61e9112fb9a0e73875d0f74ed67a8d4a8627f89032856af90ffe4967af04035391b96d844a726cca91f387ee626b2ea18e1adbfd6ef832e0129c26a3c8d48c4d94cd6212acccf641437f5168e43dfa868b63d1c316dc1071d14425c6fb87ea251aacb362ceb40b076b8523b73cfb15782431f4545e6ad9bb834e9d39406088edc6258eeb9e7e31832d4728a484cb192faacd48649ec8c4140656ab71337493c8984e8fefe666aba7fe68d01106b447315622a42b31177f6b583a5de0a9b1f8bc270f1fc215b886e6219730761b01e29abfec659930d42df5ca06e29ca86e9164fab95bcb71edaef5865c5f23d90077a519760f0699ecfb57986dcb2bdf287ae738331386907e4fefd793254108355ae48f1d52f1d83c372d79d338855c667081b77944c0a9432ea607e3add910c832404a5918f1e999358508f397e799cfc4fb1b54e76f4dd34df85ca25f04408f161e68232271a605137491fa08173fe85e6ff658586f2cff9a1c558bf1fe8ec577ba7b5be5146ef7a1ad84498b23e3ab32edaf412b322f33a4cfff3208be6f986f7128b78061766f183ae4aa09ee7b439cac0538e2ab75591a84fff2b64d5464b936c41a818d21adfcd5619307cdadb07882c6222ff19d6b0838b0aa22fe65032d086ec2b97a0bb6b534df34aa181a03be043892e29058a4d98f9c46c3ca2ab0da033ede922b1722948377dc8c19e25940aa5744d5b561f673200977fefe68db1b76c7cfb8d78b4414b98060b1e1524e7c81d1e4d30f209a91aeeb5a766fc09e03a3f08f28c1da43d3dc2ebe43bf94b3b0f807ecc99c6c2da176cd3d6578c727c3cb12619a290abd1024eb4fa518b1216a87f78952dc129d3d89559938de91bd32e497eef89ae487e8aa1a9ee3a10282190963d8e03f86cbc233a10c27fd8f125cc0f88b3e9a3a6223c76c25d5d182ebe5f43e9ada3d3e6ca06bba4612fe1c75ca280fe6fc098785dafbd915b9b1c53e89d3e3777d40313ca5686a954a34c8c338acb4ca868e6c67169b875de3636eede0f32dedae57e84d39e27c07d92ed3233368d1810771692cb8dfd637b8073ebe797241bebe8881b2ca92fc47fd82de299a96ccfb6006dcd161cb5a5768a8b061874285d781de90123a3650b0e6dcf334e92c7e477e13d34e906ba5ddf71ede61f30e6d5c5a9abf89395a387dd21cb00c68ca7e16e36389578539e4886934a1321efbfe35f82aa74aacf7c80090ad4e0c15e9a55a7b2b1859caa75c8e1e8545123efa6ddcbf91de133de09dc878046934d253528ccac9c8bc40cb3748e3b1cd540d6825efea8c7d785a7069cb2a2660a90a4e27610c803241e14255c25d42e66ae5b080684618f921a22077cb1448774ce9052fc88bdc47e2ea29a1f5b93de00ba0d7edeffca5c2113715cd800c430bce6f19aabe5f24b700881e9c85f644727fcf4891c42c8cda83b1a8c29c851c6bf7f54d9cc34be0268e983c25f4159b3356ac50c8fcfcfd71d51a22758d45cdabed69f6153f419d855547096afad8f0d0a14911cf60e7d6b8acde2ca2699811dfa86531dcff7761cd541ca136b497b46600a6b01f43cc5559fc778eb1e386d20fbca8d6bbb71d737ebc042d6879f1f2fbba9df7ce78699bc5b9f8a601d2fdef1348c63f7986ae89e5b1ef5c9ed1780cc81a2cda402c1926f77a331e089cb1aae9811f2fc9b008e5399dad35c00ed3eb57cb2101d78a4d2f1d7fcb46db9ea0fef0194f7daf78f33aa0d1cbbcbf5b6c16da80465cde0ff812a80a168b35c9f348403cdca9532c7a2707f5d8a33ba3518f3ee1c2ada474fb8d81576c4254af8402ca3ca7df2f9dcdb402a57f8abe8c4e4a4af5cbd8b50a037d1ccbe702d17038ee5e6c03611b4f8b69648860917058f0a4bb9cd097d3c38729eacf47b3114429bc14140a2a92d6e24103618ca4646a60c6d0592aa6f09b88092497e708f9243765edf0a773bb7f5a9926cbb7d1e62a8c3733970f3eae4d85ad85a8f254ee4f56e537d4d70c3f4c9c4cea56159e73f8f1cc411647238bd4216e132f0c17ca70ee380920e49ae1238f928e7ca417a671d152ecf87d1d55c1eaa03fe685654660bc11f76da4c66c42b55578e81727c4fa23e6013f13bd5a6f1ad14ddec25985275fc54bace3a8e9a8d9c0dee8c54dc4198bb0ac5d94f2893da8e7af6266426e65c9b228493ffa0eb0f52dcf72a9c204b1e26a7daffd284775b6c6e5b4c5e755c2c4b58733fafba140e64b6ff6f598f89abe28f9ff43f14107f54d7a9b9e3e117cabfc731aa67b5632e84e2a62ddd44907989c3bd35cabeecf53bcd4b51a4f30e976dcbec596b76a3c7bae97bcd41cfd1ebf7acc9a417070b87ccc7e40ee3d6f2be838149d9d146dffeb1b02dcb26d5fc730379680f6a66d172354f9b882c8080c1ac174a64824230335eeb22fc042cc62354438bfd0f3eebd88d99f060b65fb2d43e11f95df38c46335596c4403fdef4853b7dc8555734ec5ee7b0f718e28fab2d9473ec76e8d3408f900833d2b612afd3417ef787733c502dfc13b1206ddea85c47531bb7d6ea29222e2854ca836413241218d595b07745be012ad9ab98560a5a0e283cd2daca14ab05798a1718542b1e9af45dd90d90b99639e4576822b52ebe2fe55c698971dcb3efd33433ed9d1730beade35c85af041b0799596b53283cd1a52d8d3b28c39bc836662544fd8cb8f33c1d28aae5bc17db9987a7ebfa59d35fd0de6cffb6cbffc11e144eed26e965fd0a3c4f53560e7f519c5ea4a9fc3a17973444b90ab997d4f6826b6766cf73278c2eb1a9f5d38bfab1c5a76a928c96703d82344e0239c733946afa556d7e180876477881ec47d765a10caf26ea8f23d362d8b8cb38194bfeb02d8d125100221ec7f2a5d85fafa5155670c2f9f44f5d219254d38c413685744a55e4def29ad4fbbe8a16dbec8d3209d4262d90aa1ee970d54389f222fb75a39a168fac4b28e7f849bb211977a880bcc2bfe366b0af6bc9287254c39768a81d56a32771ac44644eeac8f5bfac921d4c6b2de6fa985ad3fab3534240e2fc71be57f8fec3f58c9e466379802d60bfa01e0736", 0x1000}, {&(0x7f0000003400)="ba5ab9034bb05dd764f9ca7c9199f6017b8304b5ee70d2ab14c74a5498c8ce31cf3db324c43ce7b608b93c0334438c82ed8db4a15bf27a83c9a68c10c3cebd0b5add0b94581b0a146b7653b49a4174ab625d8167e94bd96509444fff5c4e08384371d68cf89151533226d517523a7b4dbf8b96d7dc40c8359feabd33ffc9163fd180e3", 0x83}, {&(0x7f00000034c0)="0a5aa1e0d9734292bffd21158175d6dfd19c7f215e02e3454494524ca939cf8373cf79d4665e6bea6ed089136fab520bde4957e7d38a4b0da88edbd3", 0x3c}, {&(0x7f0000003500)="a798024be80f4ccbf2b51cc35e3e0ba769dc36d4b8d5196a5447df8bedc1953ee4ac9696bb407b9382b07efd6df70ccb29d7f05a4130c081d2aa5c4b96f9558bb552072ad44b2481c1a8ccd8e67853f8a98a6a671d8f0361e90119b6aa41339b4ad95c1df07a3a28cdfcbbcee66e72d1a8986d650dd5439d8eaedfaa295f59cee82ea247656ec277e813ba9712d048b181c5efd18352ed3b422d6f0435bc5245564b8f3009056d14aa3c2e21a96fe1c947e4a861b2787275f7e37788", 0xbc}, {&(0x7f00000035c0)="1b954b81cc74e0409f6630e5b2f80d127d8831dde59b919f1bac254b94915203aa24e20a64b3b6c8fc38b3c2ac5bc3f0b1516fbba6de75730e91d4fdf35d7647641d44f895559701185e5fa8b0fa9b0832940648a8603f800ec4e7057ae4f193de34aa13bc49022bfd4847e2b486ab4bac19d13ac9a08f66a8242ccf676d433b95be4bd265fddc46502d1ed24344e0b476a52dfb88e6960a07e7725837a20eeaa7bb40f2138574332bd395467d05940a285bf66b796a5ca8202266568ec99ac2b4128b94df2465cd426184", 0xcb}, {&(0x7f00000036c0)="8dd8dafb49ed43656ca5542a6ccd1451161cf80e5829e99bffe3863243a8f309ebabc218025f567b5d9e35e3dc0b6cd5cd331db1feed629eb5adb50179d0053c787fbe961915275885a40e5c728ac2bd8d662d879d9d5439502ce1905887a915f93c4e8389eb4eb3b213170570f73483e7bc8203a5a2e27cf5c7ad89df93898a3452882c52e4e2538897ca2e9d302894c57a443cefa82882d48112cdc2081bfb5ac772afd02a341a4ce67042dd9a2f5dc07acf20e84a0e30fefb5017f4b6e2d71995477408a3ba39882854f8bcf9a559d19d5c0ea878e3973361fdbc0435b676adb65484f215abe89ede8873b220333e9a", 0xf1}, {&(0x7f00000037c0)="f28d27bae6ef2ad1a164c486d566eb8c02e5d60fe4e7a0ecbdd0d17846198e2d0374c28e8aee66fdf644b38ca40fc58379c047799f61cc884bfa52353c87f69c741f50d1b6856b319eabf2db479fdcb51e63fb37e1533b64e124fa64964767ec39607a961bfc8d21170a9d93053ee7f2776e21a6268c6e0eff5dbd65683e929912baf45421c7bd543492a0a364b00366ab07555bef6abe9101676bad554fe8d4ae1f58c39328fdfa134f2836a64302761ad543ba21f02e3819579a6dfe04ec54ba35ddebe3491e24048af6f24e72cc3fdb8f2983a3", 0xd5}, {&(0x7f00000038c0)="14e813581e7db38b6c9df8523aa087b3a06cf441610432625650d922184126e4c27e1aa809", 0x25}, {&(0x7f0000003900)="97ae5fae139c27d05566a7df8a47ecbf10bb2db7208f1457a009d107c16a24375f68e3b3563515bebe0114b22cbdbebb288b5a589991d6d8552ee6c2774cca06768c45bbadcb3462cfc8ffe73f65e2ec07ee8aad7ad7a8d2882d748d9dfcb2674afe88600523b4bf9f5f15873c7043b1da7cc6e73b6f26faee2b5bb4affe4d3f1c610a2189adbeb1b7f366a8102a5794f9693652f257aa9a5fa1676ed7826101540da50a08a46c386106a3e32c14e501e9d577dd68a1846f85d60db59cd3ca9f146e0e94e6038086bfc26c93aa4d88764008e890fefb4e8f1b390edeaed07572e2be0c1e4b51966cb99e7247aba7a906704ef081e905cf24e4c901babba641", 0xff}, {&(0x7f0000003a00)="d3ada42b0fe8ecdd7975707c3cbb29cbc9ab9484de056b85c4685a5a67d40a1eeb2cb271a6090d83e0ea9d09de2cda1aa16bdbab2dd1b7645be64f88cc66340b238eb9964eda0e0ca59478ccd0bd1c2175e49a363fe78303079ab92d3bd47a2fa8709da5a849364cb449f38989b44d200e6d48a510728f70d75ca0cb9d4625", 0x7f}], 0xa, 0x0, 0x0, 0x4004000}], 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x1, 0x2fe00000000007}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)=""/102400}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0xfffffffffffffe64, "f6c6"}, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x87) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) 19:02:07 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740200dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:07 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000006558", 0x24) 19:02:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x8000000}}}}}}}, 0x6c) 19:02:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x99c1010000000000}, 0x0) 19:02:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000080)={0xffffff00, 0xc, [0x1, 0x5, 0x1]}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2387.129999] validate_nla: 1 callbacks suppressed [ 2387.130009] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2387.392455] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:08 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000060", 0x24) 19:02:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x9ac1010000000000}, 0x0) [ 2387.806062] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2387.829607] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:08 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000005865", 0x24) 19:02:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740300dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x9bc1010000000000}, 0x0) 19:02:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000240)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2388.272227] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2388.350531] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2388.393568] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x8060000}}}}}}}, 0x6c) 19:02:11 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000081", 0x24) 19:02:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x9c02000000000000}, 0x0) 19:02:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740400dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000005f4dcb456fba2c0fe60a83cd132295cd"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:02:11 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000002694", 0x24) [ 2390.289547] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2390.312240] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:11 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00000000f0", 0x24) 19:02:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x9cbba7ba00000000}, 0x0) [ 2390.522180] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740500dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:11 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000040", 0x24) 19:02:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x3f000000}}}}}}}, 0x6c) 19:02:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x9cc1010000000000}, 0x0) 19:02:14 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000003", 0x24) 19:02:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740600dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:02:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x43050000}}}}}}}, 0x6c) [ 2393.243617] validate_nla: 2 callbacks suppressed [ 2393.243628] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2393.295748] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:14 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000006b6b", 0x24) 19:02:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740700dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:14 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000ffff", 0x24) [ 2393.614937] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2393.630229] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x9dc1010000000000}, 0x0) 19:02:14 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2393.700359] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2393.738957] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x800e0000}}}}}}}, 0x6c) 19:02:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740800dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:17 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x9ec1010000000000}, 0x0) 19:02:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x101, 0x71739eab20481ef5) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="9a10f71f9f4b"}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="d72aae3eceb7"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000000080)={{0x3, 0x0, @descriptor="ee1cae0401e40f41"}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19:02:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x80350000}}}}}}}, 0x6c) 19:02:17 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2396.408112] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2396.437528] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:17 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2396.812539] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2396.847321] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:17 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x9effffff00000000}, 0x0) 19:02:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740900dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x81000000}}}}}}}, 0x6c) 19:02:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x9fc1010000000000}, 0x0) 19:02:20 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740a00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x86ddffff}}}}}}}, 0x6c) 19:02:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @pic={0x4, 0x14, 0x1, 0x80, 0x6, 0x18, 0x6, 0x3, 0x2, 0x3, 0xe0, 0x1, 0x6, 0x1, 0xff, 0x3f}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:02:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2399.491597] validate_nla: 2 callbacks suppressed [ 2399.491608] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2399.554991] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:20 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:20 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2399.963821] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xa0c1010000000000}, 0x0) 19:02:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x88470000}}}}}}}, 0x6c) 19:02:21 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2400.139902] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:21 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740c00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xa1c1010000000000}, 0x0) 19:02:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)={r1}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c746500000000000000000000000000000000000000000000000000000002000000f6e6"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:02:21 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:21 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2400.602043] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2400.638929] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2400.691289] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:23 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:23 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x88480000}}}}}}}, 0x6c) 19:02:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xa2c1010000000000}, 0x0) 19:02:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740e00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000080)={&(0x7f0000014000/0x3000)=nil, 0x0, 0x0, 0x4, &(0x7f0000017000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2402.638941] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2402.671495] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:23 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xa3c1010000000000}, 0x0) 19:02:23 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2402.818073] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:23 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xa400000000000000}, 0x0) 19:02:24 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774741000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xa4c1010000000000}, 0x0) 19:02:26 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000006b", 0x24) 19:02:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x88640000}}}}}}}, 0x6c) 19:02:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) getpeername$l2tp(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2405.700234] validate_nla: 2 callbacks suppressed [ 2405.700244] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:26 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2405.770152] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774741200dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xa5c1010000000000}, 0x0) [ 2405.950804] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2405.973115] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:27 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000ffff", 0x24) 19:02:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xa6c1010000000000}, 0x0) 19:02:27 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2406.423214] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2406.457213] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2407.642156] NOHZ: local_softirq_pending 08 19:02:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xa7c1010000000000}, 0x0) 19:02:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x88a8ffff}}}}}}}, 0x6c) 19:02:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:29 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000ffff", 0x24) 19:02:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774741800dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x5}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2408.765205] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2408.807375] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 19:02:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xa8c1010000000000}, 0x0) 19:02:29 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000ffff", 0x24) 19:02:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 19:02:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 2409.270647] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2409.293233] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x88caffff}}}}}}}, 0x6c) 19:02:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:30 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00000088a8", 0x24) 19:02:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774744800dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xa9c1010000000000}, 0x0) 19:02:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:30 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00000000f0", 0x24) 19:02:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) timerfd_gettime(r5, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000028bd7000030000000600000008000700e000000215000100370a0000632f706172746974696f6e73000000000800020007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x9c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @multicast1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x10000001) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x84) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:02:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:30 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:30 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2409.947774] ptrace attach of "/root/syz-executor.2"[1957] was attempted by "/root/syz-executor.2"[1959] 19:02:30 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2410.012675] ptrace attach of "/root/syz-executor.2"[1964] was attempted by "/root/syz-executor.2"[1965] [ 2410.120530] ptrace attach of "/root/syz-executor.2"[1970] was attempted by "/root/syz-executor.2"[1971] 19:02:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x89060000}}}}}}}, 0x6c) 19:02:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xaac1010000000000}, 0x0) 19:02:31 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000009eff", 0x24) 19:02:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774744a00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2410.729904] validate_nla: 3 callbacks suppressed [ 2410.729914] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:31 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000f0ff", 0x24) [ 2410.799226] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f000000f000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000001ce77a1cba43d20000000000000000000002000000f6e615904c497de54bf4fed22b555f183b77ff6f2e976300"/78], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:02:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xabc1010000000000}, 0x0) 19:02:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:32 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:32 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2411.354908] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2411.393336] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0xffffa888}}}}}}}, 0x6c) 19:02:32 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:32 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r4, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="39a11e519e740b92609966696c746572000000000000000000376362eb80f764ba00000000000000000002000000f6e6"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:02:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xacc1010000000000}, 0x0) 19:02:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774744c00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:32 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2411.568437] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2411.650814] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:32 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2411.725547] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2411.819711] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xadc1010000000000}, 0x0) 19:02:32 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000ffff", 0x24) 19:02:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774744e00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2412.231103] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:33 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2412.303918] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0xffffca88}}}}}}}, 0x6c) 19:02:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xaec1010000000000}, 0x0) 19:02:33 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774746000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007, 0x0, 0xb72e, 0x4002}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:02:33 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:35 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xafc1010000000000}, 0x0) 19:02:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774746800dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0xffffdd86}}}}}}}, 0x6c) 19:02:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x45, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) r6 = creat(0x0, 0x0) ftruncate(r6, 0x208200) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) r8 = open(0x0, 0x14103e, 0x0) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x28, 0x0, 0xfffffffffffffec3) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000002000000f6e676de018cccc234fbc7d5fafcdb4b4c1cf41e0fa899d6251e648b6db3df5f506de2bdcaaefed1fb026e94e1ed5a60daf31684277dc19b9c3e3b5c"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:02:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb002000000000000}, 0x0) 19:02:35 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:35 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774746900dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb0c1010000000000}, 0x0) 19:02:36 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x3) 19:02:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb10a000000000000}, 0x0) 19:02:38 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774746c00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) r6 = creat(0x0, 0x0) ftruncate(r6, 0x208200) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x80000000, 0x8, 0x0, r6}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2417.703276] validate_nla: 9 callbacks suppressed [ 2417.703286] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2417.765221] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:38 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:39 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2418.144815] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2418.166685] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb1c1010000000000}, 0x0) 19:02:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774746f00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x4) [ 2418.647749] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:39 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2418.723347] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2418.785923] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0xffffffff, 0x5, 0x8, 0xe8, 0x7, 0xe1, 0x81, 0x9, 0x40, 0x8, 0x9, 0x7f, 0x1}, {0x1, 0x20, 0x4, 0x7f, 0x3, 0x1, 0xfc, 0x0, 0x7, 0x3, 0x80, 0x3, 0x8}, {0xdf4, 0x9, 0x2, 0x3f, 0x6, 0x1, 0x5, 0x7, 0x0, 0x1, 0x8, 0x6, 0xfe35}], 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19:02:41 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb202000000000000}, 0x0) 19:02:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774747000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2420.765936] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2420.797522] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:41 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:42 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb2c1010000000000}, 0x0) [ 2421.240234] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:42 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:02:42 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb3c1010000000000}, 0x0) 19:02:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774747400dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:44 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:44 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) r2 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', r3, 0x0) r4 = getgid() fchown(r1, r3, r4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000001c0)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x0, "09624b2c193f6d974853373dcaa79dce7872caefb029afabd24e408586523758bca8e717d1d1a10c7b3165e8344302306e7a00450721c91a0c3e04060000ac4ec18da8"}}}}}}}, 0xaf) 19:02:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48b91c84c8000507000000000000f413d625196d24e74f4baae7ec0020d71ff8d9e254abfff57df3afc0040500000000", @ANYRES64, @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c0023092512deb442e3021744828b2671464f6ca7d2d9216206004b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e5743ee72563724858384f72979ba360bd6e444d04e70f5c7d"], 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000dfff080001006866736300d372dfba1839992b9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1e382ad7a282b7ec0f2c5d3c70181d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x20, 0x2, [@TCA_RSVP_ACT={0x1c, 0x6, [@m_csum={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000080c23ef2cc9d7de4f070e13dacc9db8114cf41051878e74c520d98a2b9ecba6e67d91aba88288968e61a74d989291c78e6a9929c1d617134782a5339c41a5b151f22871bd351fc39984efb916fa4bd3187c8c6137e26a159e9bd37de7fcda6e8487637056ee4a89799c0a8ada1749407862990e2ce1a31b875b0a3890c8c1cb7c17ccb656d2d61c5a5f5ddfdab409e4bd1e6b3590810823f", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fddbdf251500000008000300", @ANYRES32=r5, @ANYBLOB="0a001a00aaaaaaaaaaaa0000"], 0x28}}, 0x20000000) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000004c0)=ANY=[@ANYBLOB="66696c7465700000eb4788d10000000000ee01000000f6e6f6a19bf3c34e9df3fc7aecc91c52ce50778905f5c1874169a97d779c09000000a4f0af96e9c768ad1ff8c3c7622480c60ed66eaa28c7bf49acdf5993997a36cc8b7c379b786b4acf51458a50e0e6be5e00"/117], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2423.795152] validate_nla: 1 callbacks suppressed [ 2423.795162] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2423.835676] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:44 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2424.273188] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2424.297917] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:45 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774747a00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb4c1010000000000}, 0x0) 19:02:45 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2424.756386] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2424.776051] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x2e2000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x1f8, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39b6eadc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93bd}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ebc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1361}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5839}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6367839d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58097b69}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46c4ca78}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13c3290f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78d800db}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62f1999f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x421b531d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4626dcd1}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bed2e60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dc9f596}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f9602c1}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) 19:02:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000040)=0x2e41) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00b8e2d7010420880b00000000000000000800000086dd080088be0000f2ff100000000100000000000000000000200000000600000000000000001f00000800655800"], 0x6c) 19:02:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb5c1010000000000}, 0x0) [ 2424.904538] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:47 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474ba00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb6c1010000000000}, 0x0) 19:02:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2426.902279] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:47 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2426.969646] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:47 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb7c1010000000000}, 0x0) 19:02:48 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00000000f0", 0x24) [ 2427.153415] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:48 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000002", 0x24) 19:02:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb8c1010000000000}, 0x0) 19:02:48 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000003", 0x24) 19:02:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474f000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:50 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000004", 0x24) 19:02:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xb9c1010000000000}, 0x0) 19:02:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:02:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e20, 0x3, @remote, 0xdd9}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x1f}, 0x8) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2429.921423] validate_nla: 2 callbacks suppressed [ 2429.921453] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2429.974404] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:50 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000005", 0x24) [ 2430.022963] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xbac1010000000000}, 0x0) 19:02:51 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000006", 0x24) [ 2430.205641] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:51 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000008", 0x24) 19:02:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xbbc1010000000000}, 0x0) 19:02:51 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000009", 0x24) [ 2430.386326] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474ee01dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19:02:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:53 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000000a", 0x24) 19:02:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xbcc1010000000000}, 0x0) 19:02:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r4, 0x0) fcntl$getown(r4, 0x9) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x10202, 0x3, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r4, 0x2, 0x2}) [ 2432.976601] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:53 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000000b", 0x24) [ 2433.036430] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xbdc1010000000000}, 0x0) 19:02:54 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000000c", 0x24) [ 2433.144284] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:54 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000000e", 0x24) [ 2433.203112] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xbec1010000000000}, 0x0) 19:02:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000aaaaaaaaaabbaaaaaaaaffffffffac1e00010420880b00000000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000060000000000000000000000c9fb037100"/108], 0x6c) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r4, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000001c0)={r5, 0x4, 0x30, 0x1, 0x7}, &(0x7f0000000200)=0x18) [ 2433.402610] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774744f02dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:54 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000000f", 0x24) 19:02:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xbfc1010000000000}, 0x0) 19:02:56 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000010", 0x24) 19:02:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474ae02dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) 19:02:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) truncate(0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x32d600, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 19:02:56 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000060", 0x24) [ 2436.062529] validate_nla: 2 callbacks suppressed [ 2436.062540] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2436.119349] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:57 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00000000f0", 0x24) 19:02:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0xf, &(0x7f00000013c0)={&(0x7f00000000c0)={0x18, 0x17, 0x101, 0x0, 0x0, {0x4}, [@typed={0x4, 0xd, 0x0, 0x0, @u32=0x6}]}, 0x18}}, 0x40080) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffdd, 0x0) [ 2436.171325] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:02:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474c402dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:02:57 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:57 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xb, &(0x7f0000000200)="f71559c80aa4cefd3b79e7"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2436.334476] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2436.412808] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:02:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:02:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xc0c1010000000000}, 0x0) 19:02:59 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:02:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x13) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r2, &(0x7f0000000300)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], 0x22) 19:02:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474fc02dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:00 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2439.093911] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2439.121166] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xc1c1010000000000}, 0x0) 19:03:00 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:00 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2439.222409] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2439.272174] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000440)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) execve(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) 19:03:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740003dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xc2c1010000000000}, 0x0) 19:03:00 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:00 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000), 0xc) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) write$nbd(r3, &(0x7f00000001c0)=ANY=[], 0xed) [ 2439.386379] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) write$P9_RLERROR(r2, &(0x7f0000000040)={0x16, 0x7, 0x2, {0xd, '/dev/net/tun\x00'}}, 0x16) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964b2aaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b000000005a0000000800000086dd08603f0a30000000100000000100000000000000080022eb0000000020001e000000000000000000210000000800655800000000"], 0x6c) 19:03:00 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774749f03dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xc3c1010000000000}, 0x0) [ 2439.561854] audit: type=1400 audit(1588532580.447:372): avc: denied { write } for pid=3048 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 19:03:00 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:00 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @empty=[0x5], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "298709", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0xff], 0x0, 0x0}, [{0x0, 0x0, "af10"}]}}}}}}, 0x0) 19:03:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:03 executing program 1: syz_emit_ethernet(0x12, &(0x7f0000000000)={@multicast, @empty=[0x5], @val={@void}, {@generic={0x88f5}}}, 0x0) 19:03:03 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xc3ffffff00000000}, 0x0) 19:03:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474d603dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000001c0)={0x10000, 0x6, 0x4, 0x20000, 0x3, {0x0, 0xea60}, {0x4, 0x0, 0x4, 0xb4, 0xff, 0x54, "0b690133"}, 0x0, 0x1, @planes=&(0x7f0000000040)={0xab, 0x9, @fd=r3}, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f00000000c0)={0x3, 0x9}) 19:03:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) connect$inet(r0, &(0x7f0000000cc0)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000010c0)=0x19ff, 0x4) sendto$inet(r0, &(0x7f0000000140)="01", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="b0", 0x1, 0x0, 0x0, 0x0) [ 2442.326254] validate_nla: 3 callbacks suppressed [ 2442.326264] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:03 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2442.392016] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:03 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2442.487531] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2442.510036] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:03 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000094", 0x24) 19:03:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xc4c1010000000000}, 0x0) 19:03:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474e803dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2442.591868] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2442.670978] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:06 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:06 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xc5c1010000000000}, 0x0) 19:03:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000240)="ade5319150396e408712ff0749f551d2a1bb67aa51cc5a442bf771b762595e1dec863724695030d53086a34c295fcd3ca8f02880ff9d75dbbc2d14a232e1da04f85ddf199c8af5efd8c95ccb4d71fa7a88c6dab9d114dd4ca9c22b0bb0848384eabe2d8440b072d46a291cc72130382b5ce30971bf776f453befd58d9b485e57b13fda6e2e233771d9137885b2d948647a9ebd9cfd0dd50085f63fd279ac2bcc03debe265ff8a6098df140931e7aafa2b1fdeaba1dc1366dd11f0410b4771595b9df00849c24c5a3579a9883bbaa7de2e384cf09807c2f11afed1903c5cb36ac64bfd9227a57c3e95567f086225242e2d3fc", 0xf2}, {&(0x7f0000000040)="74470500cdbe6b449ddea6154ad106947b642d1c235a4e70a90ebdbe3b05009a79e2005557d6cf9d17fdaceeceffff4ffea73edc29", 0x35}, {&(0x7f0000000340)="6427d210a3cb76cfff4595c7eb6e0d35674e7aade073d4a5e0e26fef681ca131ee9b421167ad136620e8fcf4bc114dbe2d6fd153618b2876d40cb02e46008cf39bdcbc99c375ddcc48ba79c69feb448ad470c1b9c57f47c858d882f4b20940c7ce64076f49809879b910d71d4700f0767b1ef21de7b42db72a90ee8903cd2e1ceb3499dee6ea05b8edb4d1e355b850c85377d69c32b979a6ff9daabc170fd2c2bc503429d5813a72865b", 0xaa}, {&(0x7f0000000400)="66b9257bf8ee4ffeaf204e645615d5471defb046965a4dd861112a6f359b0ea05285a4667c182d78698b1395b85b5be23a98a37ec67c714c8957f9b97ef55d08fb9279bfd0c2a75bf7c20514f25354e735b722721fa24eda866d2cc7f7db3d9cc63076d6f279fecb32a7236bc5ca8bc56ba59b8a2f00634b342356e5be9138504cf15a52e1482843f8fe4cd561700ef4c35a431000108cba0bddf5d01837a8a0fe63e651b8c843d0e8df2dfc1deaff6aec15a4581119b2e1467fe53d3394b009553b22a2d35c644f621c236fa8e8a07a134d6171f5a7b8f7a0864295773ab0b50f7db39f6f1e580b6a2ab62bc11ffa001dd9", 0xf2}, {&(0x7f0000000140)="d3b9a5a378f11645d89991a4ab1b211402740444af5ea9f8357fbd7819936ee0728c0c9bac2d2365dc0b1419969bdc129a380cffc10ad079c28c4f34700053082e161733864d4a03897b5ff2ee0fb813805b72d0267bbe5dd590f58cb63cf6a1b4477765783f3425a2406deafb82581e836227fd01c5f0b14d432e22e983b8", 0x7f}], 0x5) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000580)={r4, 0x632, 0x9, 0x7ec}, &(0x7f00000005c0)=0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000009f84bb57aa1faaaaaa0008004600005e0000000000299078ffffffffac1e0001940400000420880bc9adb11f092194ae0800000086dd080088be00000000100000000100000000000000080022eb00000000200000000600000000000000000000000800655800000004"], 0x70) 19:03:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474f803dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000000140)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c45e, 0x0, 0xfffffffffffffd4f) [ 2445.359087] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:06 executing program 1: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2445.409811] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xc6c1010000000000}, 0x0) 19:03:06 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000065", 0x24) [ 2445.531646] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:06 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2445.595348] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474fe03dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xc7c1010000000000}, 0x0) 19:03:09 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000058", 0x24) 19:03:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:09 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) r2 = fcntl$dupfd(r0, 0x406, r1) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x3, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x2000c000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffff971e00010420880b00000000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000600000000000000000000000800655800000000"], 0x6c) 19:03:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740005dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2448.484038] validate_nla: 2 callbacks suppressed [ 2448.484047] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:09 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2448.532153] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:09 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000026", 0x24) [ 2448.803520] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2448.820693] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xc8c1010000000000}, 0x0) 19:03:09 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740006dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2449.047947] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2449.099708] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:12 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a00000000aa63b0ccc200299078ffffffffac1e00010420880b00000000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000060000000000000000000000080065"], 0x6c) 19:03:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740007dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xc9c1010000000000}, 0x0) 19:03:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2451.533780] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:12 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2451.575627] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xca03000000000000}, 0x0) 19:03:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2451.667587] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:12 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000006b", 0x24) 19:03:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2451.792966] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:12 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00000000ff", 0x24) 19:03:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740009dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xcac1010000000000}, 0x0) 19:03:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:12 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xcbc1010000000000}, 0x0) 19:03:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474000adfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:13 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xccc1010000000000}, 0x0) 19:03:13 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474000cdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:13 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xcdc1010000000000}, 0x0) 19:03:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', {0x7, 0x200, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r4, 0x1, 0x3, 0xd6a, 0x701, 0x0, 0x9c, 0x9, 0x81, 0x8, 0xccbb}) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) r6 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r6, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xa10000, 0x5, 0x0, r6, 0x0, &(0x7f0000000040)={0x9b0940, 0x2, [], @value64=0x83ce}}) ioctl$SNDRV_PCM_IOCTL_DELAY(r7, 0x80084121, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000280)="9e6bc9948772a91c05522491fc5ab56384d84023be08fca178299c8c9e706acb61b8a44c270a4a1c6e0c9485ffcad98fb115220b298508a19267b81eb2cdc266d12ea4afdce77cf514ce08aa15d7d0eaf9732c2631ad1d5e781a8401b97f6ea5dca74bccfd0a49bd28259850d2c17bc1569c476469b41448220b764b036fb083c5cef3a8c835e404a8ffc104274d720a64fe33b2e4e64166dcae5e44b6bb10b3ace6a334691cc6860430b1d9ec91366208d5b2194df204718cc5943fbe5cf028de35b64136f7d5e4ac99a6ee89b60275721166e66c577685ccdba6c4e406ea95146104afcf015d2e3c4fa7809e6163afea8f4eb607742358c163fd74d85b8a7917655ddd53335b1029c7067ddfbc6958d9f70372b5530f1695649ade2d095f3935a57914bc8f7b51785617e5a6e3502fa0712c44bb9e28087175978ef222f695e95f1064413e331022301719deb75fd1fab4f352a5e309566a7a853d7d485e7f0ed9cde9dd8617e99b529d7c1c26f29df03fe1608c2198f6f18ba85e71607171c098537a5de5bccecfe3cd42ce9b32a11560672d6d3ea0541468605106df3e039b9fb070eba1ff02015138fdf7daeb0cebdd86779d73d683668c599fa6f65acfcea8e46a1da39cfc9ce6cd75e71913eeecfdeea2d2b83bdcd4b37d776fb219a731539244a070c446feae83fefb44bcb1173e144964031ce90fe3592a006d6e73fe52b63f4d5d10f095f15e190c4fdf7c29c487d36e6a5074b9b3766948fe5bdb8efc2083a7a25199ca5200fd651300f6df5ca16c64b4b7860ebdac46e13d49e2d0b68b35f774ef8c92ba6a9a28017452f246da4f2900466eed6fd77ee669abfd3dc4487ac44fff0fa98e0b829833ace3584efd8bf1da27901337de3ced87f25455948b086bd63e07028610a7294af02287e2a37c0066874e358801800f910103cfb9104315ea34b4231d137629d7ca3776c7c6e11e09ff781c8553f27c6680c7b336aa8381e731fea8fedc2b6022b8b06b150c4d1e32ecbf071232d1e5989cd8bde0a5b6d8b7bce3dc96b7a4c4e2bc7da66506762ae2d6a0f55cf33aba0bf76998ba737e662b89201ac0bc46bc37cf7748b16b033251cf9cb529301d76fc77bdb2df06beca434ffc0d60a100204b74ceecf4e38cdb1d281d757017e40350a81457e40b716ec2e3f4d6b53e4ba744ec34721f6d93a91bccb1f08f2f43f5b37a8cb750242d8285107035f3ecb63b4fc184f54036fecdd4659573446d398cf86de288d163b91b6c2b9fe62a1d84203db693c582d947a793deaf7c991403ca20e0d9819847e5ba3376aa7f4da2e0376f63fbb8c30bb6261f409e2fa85b91be8857d81143b0a46835f29bcaba026f186e037006949736a51add2389505d4e8cd1947949be8f6a33da00bba2d555016c1739b139240e12f4780cd14c3ce7be8403e5581d57d6f2182ae4d8f22d59ea14a518e3471e3110f13caef0ad7360633d16069d1f2c1b88a7ce4e6c82839e173689eb64bba082d977052023b08bd711b239f3a5227e3983fd9f6426ccf86e1229c001bf536b2d70748aabf2d730e03eb815b7ea86285fbaf1b90c61a24ea93b92d42fa3513f239397d2f9ca24ac5d35b5962a508116c4dda11f6e2fe77341d34d8cee4d3e293ec76ed3f3395c9370fec16920874a51b7d1bb9620716ae6343d043f72d3205be770e501a2641956cc8849e36ca0bf013ed005262eea2d3a2bf3c46b6baf260ecfa17e8fc505d2a9f7f0f60bc25904929d020de321dfa99af887997cf41c5bed3a8fd0ba283644a35565926e1a096b4a6823fc292c2fef5fb211964f3b5b1fe338f4fb18a2005e451fd551956ccb19f2a2b3f7233a57ee8a9fc186f5c771b22c7a3aba938d567eb55483b0d262a84460565a9133e9fcb9682f9cf36eb7990b28f56366d4405a82bf33291e20299a7ac6e9939cfeaac6b394769d76878c009cf22c920cc055c28bd26c1f380a92e28357fdeed6e7cf072ac6ac7d802964164564a29ffbc93ce3a0fe584523f5a045314a9bac8951c7c9ef9bde1843ae9e92a7b7e560ed88471000992a29f07ecb2a23458869f5f671d757050d07d80b6762e1f6ff0ca56bbba22e9b74b7eb314df3808ac8ea0ea92fac30f02e172ead9e88dbded94496eb929e79be9dc2a77a5675b4a3d2f5c34764a783e6848dd4f56ad3cc77008f433dc75bd84af07199ee284c9fd087a129edb36cbb60b4384454057360b12947ced546c4a84bd82b931a6e10304196ad14ba4f302bd4b6c19ae9849ccd53734bd29d053539a127b4a0d8c6d4f0e11a0d8d4aac3287dcaa48ce360471b8acd7dbd04bee573914f8b3b37c24ac2cb77ad3605a2cd84529eaa3a9236e4d82053174f4f70a7f9201d75eb773ce86957ee8a03f60ef09dc0f11810525b4f3b15fbb0f3635449ffad0d9972dfa9925bb0671d61af9eae95fa9d4bcfe20221d6947d8203cefc09584b53ac29e025ce978a5d4a02b139ba316706ec143da7e8b1dbf5137bd01e38c3fa0efef814e34e8da92af95dbb65cfc84adfba2021a4d76d19c13b7f665ab7dfe506fce7040952ad40a4706b57228f596033db5dc049d4e5b6e720630eff38616b251ab4307ae0a05feb3362aefb5f05ea0d271a88737cafd6ad166683df093d48039482fb5f2efe635777074ffccf495ecb2bd03db34e6b729d515252f4b0b77a7b2fbdd3b021d635b5fcfff0aa2dce1d8d57ea97aeed7d8a6f13567eeb0ab8e9aac9a760bccb3add95fc2a8ddf4c4e7c29ecacd6e0cd9ae8ae24f757fba72c90f3830a22fbf2fba9bf3570ee1fbf833706d501fbafa3517e7987d976fbb75bccbc90dc79003a5756736af070bf6ea5b3133baeb0219a14e1b45d06968f63ba26fb591b7e420b0d5b86bdb8885cbd3271eb8329e1fe1db9fc0f39c1d23c65d96afd7ec21ce4471bb5a0609ad683d03830b5847d9d8a37620d316ec71711456900bbb29e729f81ed8245980af5f9c237644c97f59e29089e8df424921bd8d2eaefc637aebfefdeb6dcf5f94aecde5747a580e0d3e9988bf67e7c4baad3c5ba53e855d4bab2b28d3b63fcaff03d89c066c2ce0f650e2ae62cf8ca22da545cf4b28ba046899178a1e196e5406efb71edb80445b4784faa799062025325fae132e650e763ea39442fdbbc8986f9922b2424e73570667a6a078db9276c3a2fc39350c2c2321cc436727ec92bbf9d8c448019ea76e723035dd86aba6dc2aa7128a89ec338fea2eba89af2037bb84305971d24ab4f0bab66cd7d10f90c8a211cd24c5a401b6e62d37459de211970d95080d25076b6bd50d43ebaeb9947a42f96dfec1b8bdcdf64a36c21b1cf57441ff0c152bc6fecdff0465b415dd2a5b178193ebdcc466344bce8dca6b1c97751eff7eba12dcaa9e65943975ce88818656fa594be3c5ea267f4ed4c45cc9aeed7a2cd631f1a97c3b3a50497a83422945fbeff65fb2b9bdd823fdfeedb46082c2cd1d5a352decfb2bacefd0e28888ead5bd43e04af25cb98d8afc77ea8ece7e919a312ca2a81a18cc7a19d77af92791debd9fe42d2ae9006f344169c404d33a6276cd45d91b0de1aacc9bba1b3fcddec723e8886fd69b4b42e47efce98b5f0b6884089bd6724c8afd5d583b93383a02863104ebcb3ae183e493e9769b926d03e8d6830dc558351151d5a1286c5c857b8f2e7d517dc9f1d078326510e96016ef43824df0585af2eb78b8f964d7103661c5dea9f647b79a7b8f84e324168ace4906e49d4c6713fa7d98d26ab0696a2b0f339341c6dc50c1b497c034d9ab31298e8b34be375cceef1d320057f14be430e09b5eec412cc1fd64a52263486853a89ca9f55b8b1ad6f7833d31068e88d593a3cce48baa89e42a507517aaecbc5057e87f848a2955c54b6ac6cc248437517593383ed68dd2e12e776478a541ab3139f290e1963ceb9957c9f7bf17f0cc9391766807bb9c9101d5114944e426d834ae22e5b7da0764f01bf692c6df2696f0ac853ec8331cc93c80c2c9a0f19b394f00d2711f53b72d1aae39894c398aee7624e4c68ad2bc42d18559321d19084f59ee407567f3c6531b715f43a96843969407f21aea94d879448d82d6a6738214f747f2e6f6371bc9926c8b3646f0bbf6261a96eb18b1c1110b14b163c509af4d4c7cc21dc99b4eebe3bb2d89a5031f8864c5a4d085a1bdf9158bbc137c36190d67daa4219b6a016df3c0ca63a988185d467e03b42b884767de3c2bce0bbfd1f9a46d09c2cc6345bd668ec9b60a5120bb44d2de3e7addd50c1aaf72ea15a0e8e00000620d6515087f7b5d6ab2b4c120c5ee5b7eed7fd7f6efa4572fedf5be04a42d1654438561f1ca7dfd01bd3914c7ae611f84df299724fac1a9a9818e3ecab4646e3d1f70f5d6c5e4544c3de3786c9560e0de90110480e1171b1d6ecbb6fe8fc1b1865a94d0acd750b22f26ced834481d38b6635eef639dee67b344c1a552cff6a06f7723866b4ac6cf8be02fe206ba4ef9ce23eae10356ab15501f20bc8c4d6329026c6f26771a471c658604ee750cd3c80bf19b1b1818dcb33360efb6ec809e5409261e75fa17ec0004750ce10e2a44c99f83cb91b2b9086f504f47ce9ea22c8f85e85178f05a625bd5fd39bb293b24b4a19c03923f957f1a2689eae4fc51e5d35d12fdb239a3fc37e1724106eccd10e19cc1f9a741c97cdf038c15fd2a736e8a0473490bf2cce6279461f48346da38d1e239ce30ebd5f5cd73186826d117054a9f086a52ecea452c7075a513751b29f8a77cf6fdc7b7f45cb9c4e324239ece5270bf274def1938e112dd85bb82912037198d153061aead61fc740af4b168f63f1d6d3d655453b8e5fa7a24e73b437b7cde38aa3f50a7ca88992cd1ca1b56bb206bed77a10f1d05e49f9d59aaaa027247ef8d3f2c68489fa04f839f0d3dcffb133d72e4616e34893cf7dcc9324c8187906ef4bbf6ef3ea46ed7abe88ff5067236af96bae75b452594a5963f02c4c4bdc27b9d9a138afb6e13bf9b07e80976b8e6d26b38527e2251aca3cb8d096c601789a4e2b4baab4f2fb84a5ea95b1353a7b503372bfb1434894743ad142e5b70f2723f30fc9072d00911f59f21c57ceb474193ae9c14ee5164be837d6989e116e9e38919e63f5f069ab71685158ef4761c8c060c91fe7c43155e0e6e8603ea11f94c40f0971d3c937168cf079b8960b0a7757b9fef06fbdeabae1f3589d2a313877b1f4604625f15fc616789b8ee9ca0b2b99b4e2e800434fc17c67ca43e5f7b369ab17df2f783273823526b53573a6cb3f9a1835eec04b8fbcfc61d5bd3555a07b1779b6247fe5d9c3d81b9821c024321f708927a2640b50e304f068def4a43ff405a9a78bd3d065b76b3c553cb5027eec02feac4112dd117d499c3897df5dc3ec3d76d86506b5bd6850d92817a890ab420b0c258aed2974f342e5740b786571d4738cec9deb51ca4da968a7bb3d18700775a90a8ecead52cde0f2e5b4a01a0a0e8de9741dca96d6b8a486d6166dac6e947f686cb1fe35b3d7c2a578c015b0557b84d00b4d3c8f82219ea246bb177599cfec089fc89ea23bb05cac38ae26498828aae49d0dadcf1ac1ec7885b5aeaa95d27838998f14da5416cd70c9c2e0ac5995936914bf638f990b5dca9a1c8dc2dcea75ad8cbe111bc084b00d726d6e95aa3cd87b7b4bf9ab11af743d1120d3c4b9a241eb501b69ab74396b7a5a1be5f7ebf002fb2d2cbcd0b3ea75c20d0a84505646b2ed13c87db42eafa130c70fdcec36edd4e6f162c59cd72675739d1c64cf0f0", 0x1000) 19:03:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:15 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474000edfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2455.115064] validate_nla: 8 callbacks suppressed [ 2455.115074] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2455.151540] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:16 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:16 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2455.200928] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010400000000000000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000600000000000000000000000800655800000000"], 0x6c) 19:03:16 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xcec1010000000000}, 0x0) 19:03:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740012dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:16 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:16 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2455.366532] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2455.425305] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:19 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xcfc1010000000000}, 0x0) 19:03:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000009f7ebb57964be5a9aaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00000100000000000800000086dd080088be00000000100000000100000000000000080022eb000000002000000006000000000000d30df34279c9640c5800000000da16384a5dbe2b40b02f9c311d3d70d38de64069c9f7f7e75d57f2ed9a90a526519f66c78fc7394d579f2463ac8bd9d67a0f98f2f608758224d8529c61878691cf1f6d76bdb09e455f392dcca4b520c4c7ba6a221860cc9618aa1f6f933d5f11375b4e5e33d700ca2304"], 0x6c) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) r4 = creat(0x0, 0x0) ftruncate(r4, 0x208200) r5 = creat(0x0, 0x1a) ftruncate(r5, 0x208200) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000040)=0x4) socket$phonet(0x23, 0x2, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000140)=0x4) 19:03:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740018dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2458.189151] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2458.231346] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:19 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2458.281075] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xd0c1010000000000}, 0x0) 19:03:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474361edfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2458.392822] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2458.476676] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:22 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xd1c1010000000000}, 0x0) 19:03:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474001fdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'macsec0\x00', 0x400}) r3 = semget$private(0x0, 0x5, 0x0) semop(r3, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) semop(r3, &(0x7f000001a000)=[{}], 0x1) semctl$GETPID(r3, 0x2, 0xb, &(0x7f00000001c0)=""/68) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) [ 2461.252277] validate_nla: 1 callbacks suppressed [ 2461.252286] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2461.284815] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:22 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:22 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xd2c1010000000000}, 0x0) 19:03:22 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2461.447890] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:22 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2461.600168] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xd3c1010000000000}, 0x0) 19:03:25 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740020dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x8000}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x68) 19:03:25 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2464.340878] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2464.373891] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:25 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xd4c1010000000000}, 0x0) [ 2464.546091] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2464.570467] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:28 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774741e36dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x320c0, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 19:03:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xd5c1010000000000}, 0x0) [ 2467.354033] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2467.390022] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xd6c1010000000000}, 0x0) 19:03:28 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2467.497417] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:28 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00000000ff", 0x24) 19:03:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2467.699898] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:31 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xd7c1010000000000}, 0x0) 19:03:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff5, 0x10, r2, 0x5cfd8000) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x208200) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000030000000600000008000700e000000215000100370a0000632f706172746974696f6e73000000000800020007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x9c, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @multicast1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x10000001) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @empty}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x3, 0xd000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000096b4eb9d70989e009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffff0b00000000000086dd080088be00000000100000000100c56b3c4aaad4a6d8750b00080022eb000000003000c97325aed490"], 0x6c) 19:03:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474003fdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2470.398515] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:31 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00000000ff", 0x24) [ 2470.469357] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740040dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xd8c1010000000000}, 0x0) 19:03:31 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00000000ff", 0x24) 19:03:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2470.621370] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2470.743025] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740048dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:34 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000088", 0x24) 19:03:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x688800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x142) 19:03:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:03:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xd9c1010000000000}, 0x0) [ 2473.469724] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2473.502863] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:34 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2473.546664] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x101a00) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000000c0)=r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x4, 0x141a, 0x0, 'queue0\x00', 0x81}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb2) [ 2473.587156] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, 0x0, 0x0) 19:03:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xdac1010000000000}, 0x0) 19:03:34 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b000000009e", 0x24) 19:03:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474004adfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2473.745644] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:34 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00000000f0", 0x24) [ 2473.819296] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2473.909871] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, 0x0, 0x0) 19:03:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xdbc1010000000000}, 0x0) 19:03:37 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474004cdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xb5c, 0x7, 0x80, 0x1000, 0x7, "45b9899b537c0d1c758b23dd01d8032699160d"}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000001c0)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@arp={0x806, @generic={0x335, 0x8864, 0x6, 0x5, 0x2, @broadcast, "14c8ba3ef1", @random="6be8800f69f8", "a99769769edb71889f99ce87541b"}}}}}, 0x39) [ 2476.545763] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2476.569037] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:37 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xdcc1010000000000}, 0x0) 19:03:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474004edfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2476.678909] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, 0x0, 0x0) 19:03:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xddc1010000000000}, 0x0) 19:03:37 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00000000ff", 0x24) 19:03:37 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474024fdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:37 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000600000000000000000000000800651800000000"], 0x6c) 19:03:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xdec1010000000000}, 0x0) 19:03:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6a) 19:03:40 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774746558dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2479.579733] validate_nla: 4 callbacks suppressed [ 2479.579749] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:40 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2479.630247] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xdfc1010000000000}, 0x0) 19:03:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6a) 19:03:40 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2479.765006] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:40 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xe0c1010000000000}, 0x0) [ 2479.880861] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2479.928533] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6a) 19:03:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:43 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:43 executing program 3: r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000040)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) syz_mount_image$ocfs2(&(0x7f00000000c0)='ocfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x2, 0x9, &(0x7f0000000800)=[{&(0x7f0000000200)="d8419b1ac121208287355121310e1e18a11b0db4067b3e996f90cdab10906059027aa2642ad3793f93d83636d60685f6f5af09c47b6a83be8ba190a17be7fbf8c0ec5a", 0x43, 0x80}, {&(0x7f0000000280)="852d435cc9d7976b28267e57dbc78ef8e772363d6bad6032ed6121663b1878efaf3685fd91e5b3b64015c8a534d38f101d63da140d2ef6577d9b3f799061b69bd6c5df49635c167875c9851b8465b01e0e2859aab399738d95e176f97f2af1f628c1a3e18c9a54b66e50dddab0a143e599c1dcc5e6c910829d72f9d1ce3f837169d14df7956cb265278ce6de4fa426cc1c6d3489c08f1a835af67a971aa3bc6dd38005e3049e91b825570ec78dcbff8df7d26a674ec1b638894c48b3390b7e8519b96e7386f2b706f98436ada22250dd3f73d2469ac5d27f322f92541ef399ef9f9f8030e8f47b71075ee5eb53", 0xed, 0x6b5}, {&(0x7f0000000380)="2cd51b5cc85736174cc0d8c801be41e76a9ff52a7c85494aed1eb2589bf6348b6b3fb52b7274db0f69d055489ad6967f326f7f2ab412a78849d9deeca51cfa2ba92b3cd40a9a15ec3f0c94351871e0dd81de66848c6137f29a2c8db3c15bede1edc3305bb5efce8c92abfabbd2322fea0e6e286f99eadb30cee2bb88ca337eb303ff7d750bb24f4971a605dade798afc380d19e4eddd6c504d54f8784ec372e07493eaa4b681cee6d8ad2c04b6f77d1b00e774e9a4b8755a56698ffbc452b79396d97661f6bd3cd041fdf9b862a98e757eb38be2a0d7bbdba6d24689786a434ee658ad2a5379e1cc89f3e761ac59", 0xee, 0x4}, {&(0x7f0000000480)="f182a079961c565de468a9594e1800b1e453a479fd8aff065df25927aaaab8d79ab1f67c28991ca043595ca88bbf77b1b2d76b7cfc3ccbfab704e892e67d4e9b03418720f930ae4a1479fbaa05e9bfbd8c48dd5f4f5ed4e15526bfa614aefb5fab2bb66827078df604cb02267a03e0e6d2b92478c76fea7c99f2580a134288377c7dc77304e238278093", 0x8a, 0xfffffffffffffffe}, {&(0x7f0000000540)="cbdf0468b81ab0e634f318c723aade426067d4801ae80d6fe179d34c93744e940727123342dbaadaeb563e1806281b32ecf40107d6b7506a0ab1e25d6e69cfa96b83180d71875ea66e01e6b751119700216903d9be9f2bb91112f1ac5cb1df5b2d45", 0x62, 0x1e}, {&(0x7f00000005c0)="3f8c7af7a0aee9f62771213b7394dae0106ccb2dadef73f99bff5bfb7520cfb05ddf8d7de4e09c4b68f14dc7132ae373f25df1e318360f35960da292fa60552dc26c1ad302b4abefcf8266c08a841bc279d26d8e9c3026bf7a61973e90ea0208ead412de1cc24e1be0df0bda435295c2707753", 0x73, 0x2}, {&(0x7f0000000640)="4b38eb36a11ba57f66", 0x9, 0x7fff}, {&(0x7f0000000680)="245d97bf3fb5fc138be797c84c7c0ebd00c6d1579945a1523aaba4bdf00ed515db8f5f30ecd1bebfcb826dfb0a988cc8eaf1c0e058d9f4ab412e34b4c6f59dc88cc7ae8699cdf5f7a7c498efbcd909e63a7879d951f7584500774e3ea1d7a40511a96d7f5cc20461e172c86fdeb8382928f11e2bd59a3a1d30a9823ef06e0290c5913c6017f50e48de785b15fade689e57747b4ecab4244088045903f46051138f0cfa4511539cca4d25de9603ca9adc3d", 0xb1, 0x4}, {&(0x7f0000000740)="bebf0856be0e77e6e1e1b9035815e6fba08ba892507bdc7740741af07303c3ef2e16c74216d746ffe8e9381b099cb8668395c0d81ae63cfd336afc3f7a4711048d3fa0105d904da59494c1619357313d9c99a37ff61ac2e59ab644150edab83d9aabe1c877979188b9aacbba1757d1e93099fb0292d263fbd481a30e2c4c7ce97533a97488019d57cb116cc3c13eabaed0b9f6a49e438e8f2196dbf10fd14a73be1bc97a27e35a9c4811e80a68", 0xad, 0x9}], 0x41000, &(0x7f0000000900)='/dev/net/tun\x00') 19:03:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xe4ffffff00000000}, 0x0) 19:03:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740060dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2482.629614] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2482.668360] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:43 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xf0ffffff00000000}, 0x0) 19:03:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740012dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2482.858942] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2482.891959] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:43 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2482.908713] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 19:03:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774745865dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:43 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa00080045001c5a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be000000001000000001000000000000000807000000000000000000000600000000000000000000000800655800000000"], 0x6c) 19:03:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474f803dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xf803000000000000}, 0x0) 19:03:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740068dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:46 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa000800450000ff0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000600000000000000000000000800655800000000"], 0x6c) [ 2485.680623] validate_nla: 2 callbacks suppressed [ 2485.680633] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:46 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2485.726898] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2485.756649] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:46 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2485.822082] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740069dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xfc02000000000000}, 0x0) 19:03:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774745865dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:46 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2485.956654] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000040)=0x4) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) [ 2486.022088] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2486.038644] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 19:03:46 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2486.077618] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xfeff000000000000}, 0x0) 19:03:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474006cdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:49 executing program 1: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:49 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:49 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x624280) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000000c0)=0x5) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:03:49 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xacc1010000000000}, 0x0) [ 2488.862002] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2488.889648] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xfeffffff00000000}, 0x0) 19:03:49 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000240)={@val={0x2}, @void, @mpls={[{0x81, 0x0, 0x1}, {0x20, 0x0, 0x1}, {0x81}], @llc={@llc={0xf8, 0x80, "ac7f", "e29daca74e6a4314857fe33f61eb75997ed339898e6c2d1143276fc95513e416af7ff4b2edb9561aa60be4d65a55e416f736a15a631a69814f0950e366b49d6dc4cbd0621a9a35af0661c66dc82e4451e1168fb099cb821d45b3f52afd590c82aa1d94a5a42aa269225c37b904cdc1353cf498684b23e2a8d015788445fa49bd3e1882d1a2ee104f749a85cc10b427076f8dcc1d460c7b58250524a2395c422796966eb925ccb86cee9e1aebfe059e7dae6c110ec488691edf817fba7439a504c3948563c81afdabe9976167c225b6e4f26544ece107853382d218"}}}}, 0xef) 19:03:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474006fdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:50 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774744a00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xff0f000000000000}, 0x0) 19:03:50 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:50 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740070dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xff7f000000000000}, 0x0) 19:03:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}, {0x8, 0x6558, 0x88480000}}}}}}}, 0x6c) 19:03:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be00000000100000000100000000000000080022eb000000002000000006000000000000000000000008046558000000004afcff8f2de0a6593c56810f7f274fea774bd205000000f95bcdca6b026d6aba5cd73571c8ccacd35b01470905779735082d0aa71e25ed4cc405781c542667abeb297418"], 0x6c) r2 = creat(0x0, 0x0) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) r4 = creat(0x0, 0x0) ftruncate(r4, 0x208200) r5 = userfaultfd(0x0) ftruncate(r5, 0x7) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]}) 19:03:52 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:03:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740074dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2491.914291] validate_nla: 9 callbacks suppressed [ 2491.914301] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:52 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2491.961472] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2491.999243] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xffff1f0000000000}, 0x0) 19:03:53 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2492.320716] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:53 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0xf) 19:03:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740e00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474007adfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2492.499029] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2492.522322] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2492.598509] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:55 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x10) 19:03:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xffffff7f00000000}, 0x0) 19:03:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740a00dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740081dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth1\x00', 0x10}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000001c0)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xb01e, 0x4]}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x70) [ 2494.976722] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 19:03:55 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x1b) [ 2495.030454] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:56 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0xc0) [ 2495.078938] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000240)={@val={0x2}, @val={0x1, 0x4, 0x4f, 0x9, 0xff, 0x1}, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x8, 0x4, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x9, "fb74eea0079616"}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x82) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) 19:03:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xffffffff00000000}, 0x0) 19:03:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000250774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474039fdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:03:58 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:03:58 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0xec0) 19:03:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xffffffff87800000}, 0x0) 19:03:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507747402aedfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:03:59 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0xfdef) 19:03:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = gettid() sched_setparam(r1, &(0x7f0000000040)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000180)={0x3, 0x3, 0x7, 0x20, 0x3, [0x2, 0x5804, 0x1, 0x7fff], [0x10000, 0x3, 0x7, 0x7], [0x80000000, 0x1000, 0xb0, 0x40], [0x7fffffff, 0x7, 0x7, 0x6]}) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x4, 0x3f) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000000400)={@val={0x2}, @val={0x1, 0x4, 0x0, 0x1f, 0x1f7, 0x3b0d}, @eth={@broadcast, @dev={[], 0x22}, @void, {@ipv4={0x800, @tcp={{0x1d, 0x4, 0x0, 0x8, 0x10b0, 0x68, 0x0, 0x3f, 0x6, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2e}, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x6, 0xa, "59fe0a1367805e52"}, {0x2, 0xa, "a605dcd87cc2ff73"}, {0x0, 0x8, "c3f8f4729929"}]}, @timestamp_addr={0x44, 0x3c, 0xca, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x40}}, {@rand_addr=0x64010100, 0x4}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@local, 0x5}, {@local, 0x6f3}, {@broadcast}]}]}}, {{0x4e20, 0x4e21, r4, r5, 0x0, 0x0, 0xf, 0x10, 0x3, 0x0, 0x1, {[@exp_smc={0xfe, 0x6}, @mptcp=@mp_fclose={0x1e, 0xc, 0x20}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xe, "1dc0470711e8f84fa214d952"}, @exp_smc={0xfe, 0x6}]}}, {"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"}}}}}}}, 0x10cc) [ 2498.126080] validate_nla: 4 callbacks suppressed [ 2498.126090] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:03:59 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r2, &(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0xc20, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) fcntl$dupfd(r5, 0x0, r0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x408001, 0x0) r7 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r7, 0x0) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) [ 2498.275718] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 19:03:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6, {0xffffca88}}}}}}}}}, 0x6c) 19:03:59 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x33fe0) 19:03:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0xfffffffffffff000}, 0x0) 19:03:59 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x20000024) [ 2498.673109] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2498.723920] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:01 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0xfffffdef) 19:04:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa00080045004a9f9d1f4400002900000000000000080088be00000000100000000100000000000000080022eb00000000200000000600000000000000000000000800655800"/108], 0x6c) 19:04:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x2}, 0x0) 19:04:01 executing program 1: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000004", 0x24) 19:04:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507747400badfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507747402aedfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:02 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0xfffffffffffffdef) 19:04:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x3}, 0x0) [ 2501.132842] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:02 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) set_tid_address(&(0x7f00000000c0)) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = creat(0x0, 0x1f9) ftruncate(r1, 0x208200) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x10000, 0x1ff, {0x0, 0xea60}, {0x3, 0x2, 0xa1, 0x8, 0x1, 0x1, "c637c87b"}, 0x1f, 0x2, @fd, 0x2, 0x0, 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x2, 0x9, 0x201, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xb5d}]}, 0x24}}, 0x8000) mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x100010, r2, 0x9c000) 19:04:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x4}, 0x0) 19:04:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x5}, 0x0) [ 2501.290721] selinux_nlmsg_perm: 6 callbacks suppressed [ 2501.290736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pig=4874 comm=syz-executor.5 [ 2501.331934] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2501.356205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pig=4871 comm=syz-executor.5 19:04:05 executing program 5: r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) getpid() r1 = socket(0x400000000010, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:05 executing program 1: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b00000000ff", 0x24) 19:04:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507747402c4dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:04:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x6}, 0x0) 19:04:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x7}, 0x0) 19:04:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x87800000}, 0x0) 19:04:05 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) recvfrom$phonet(r1, &(0x7f0000000040)=""/4096, 0x1000, 0x40000100, &(0x7f0000001040)={0x23, 0x1f, 0x76, 0x16}, 0x10) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2504.191071] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x8}, 0x0) 19:04:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9}, 0x0) 19:04:05 executing program 5: getpid() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2504.310753] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 19:04:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa}, 0x0) 19:04:08 executing program 1: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000bffffa88800", 0x24) 19:04:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc}, 0x0) 19:04:08 executing program 5: r0 = getpid() tkill(r0, 0x32) r1 = socket(0x29, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507747403d6dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:04:08 executing program 5: getpid() r0 = creat(0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000200)='nfs\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffff8000, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000340)="0dcf242eac0abfe127b266ff612e651e0e8dbe99a4751a29009afd4c9b1cea43a13140254cecce48949b8646651d9594ea", 0x31, 0x7fffffff}, {&(0x7f0000000380)="93c5056656aa706f5300dc7b8d3ee45b95780f49af819e18aa19495f5d691e7ac493cf51b6f7988f8dac0e8a691678aa929ebd331c65ee45d6dcdbdb789de1290034814c0063a732dc69608a667ecb241c459792e8d29b9a234b9e79a6", 0x5d, 0x9}, {&(0x7f0000000400)="baf7f0f50ceb1b6c958a2d57fb34435fca39da5db3784ea18160aa366841763bfc969d67be9f97bf20e48e0cd7e55715f1b20c4b1b0c5fe387ecde40ac5c6915ba8fe96660e538d4a26351778dbc8f1cfc16763f98de83f06fb9091004d2a802fc81cb331e43195e5762ef041ae93eb04e2cf5da7453f6c30286b88fa6a31769abd3ba6cb8e9d4bf962eb08eb973a304fd9cbb1aab32dca39a6d8e2d7d4ba59903cb9dc9714a9b4968b9ff2b5aec5625c3811c9d9a262122e3540b53e8807b8236553d28ce137237c9792434cd4e37639622a1bb7421dde91c458309c15300a80d0f46", 0xe3, 0xe76}, {&(0x7f0000000500)="a6900155dc462bbe741156d2acb94e4de6ebdb44e86001d0b9cd024b708045e7a8da55754a5ed5ee631253faa828dbacf22f971d6100c96cb174a77ec2387df8c6dbf3c4eb70c1fd8ab8fc0308c1ffbacf570f9def47baeafde60b774fcefb153b7b09c53eff54004e7942bed514d9d4e1cf9c47432359c8ea4f4bfacb7ffc271e52e43488e79470cfe2213c9f1026688a368e9cd0d9318d7968bfb6427ca2e2e9d981c8c91d136e79065286", 0xac, 0x400}, {&(0x7f00000005c0)="fb4f46c5e03089c9f83f1fc9a2f2de4d4b5c1b5ce12e52137cee12c205ea57d05041cc4631e0030b07715249aee1a045e2fbc173898d60ca142180696b21a63854e2e0c00eab32b1e10a4f2770963df786839af11191a1a2c8bc33b10ce6abc64b9a2c9bf09f94b7074ec65c2f9b5ce2000a1b19182b6c6aea45d9b7fa904d0dd9eb82fcee7c697352ba7969254cfc0ba6d6a6478ced4460eb39b17a12db566b1d4d2a5d141f7ace2dde4551613fe238896a0688768d5120826646771e3501b6340c401cbb0fcdeb2d0f0e184199", 0xce, 0x3}], 0x1100000, &(0x7f0000000740)='\x00') r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000180)) ftruncate(r0, 0x208200) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="2f10040806400001ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000040000010000000000000000000000000033001bfe800000000000000000000000000014fe8800000000000000100000fff3011001fe80000000000000000000000000e3140b08a188371e93a6139c6d9bc8bea19f4f38d082d9dde015a1e7408da8467d8c9853e7d2405b5b1694c1b2b54d92"], 0x88) r2 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x2, 0x341000) write(r2, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) wait4(r3, &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)) 19:04:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xe}, 0x0) [ 2507.216489] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0xffffca88, {{}, 0x6}}}}}}}}, 0x6c) 19:04:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x10}, 0x0) 19:04:08 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x623a12f7826f3db4, &(0x7f0000000000)=0x1e) socket(0x400000000010, 0x3, 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) write(r1, &(0x7f0000000040)="2400000bbf9f2841a91cf53dec5df0ab0021002551071d01cb38129b020a00000a00100f3d049b6873c5b0d90a15623a3cc644b2f6004ef2ac7fa5c2c462451820918a7dd336311226b4f6af676eba8de0ad0e91500582954b2962fa82c10b0976e9e5a79bafb8245dd82a16e8b726a16472e9662b52220518b57c130639d5b54d99efd5287f8d7b06c89a3e82fe02575f69bc14fe78e9c8ddeb3f8bfa7d71020d887ae00421fadf3f141fb737a74c6264af30fd30a63e4cf135d9e73841f46c42af7bf2921f69c140aa6c5050c548141ead", 0xd2) 19:04:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x12}, 0x0) [ 2507.356917] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:08 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021e49e14961cbb9bff00fc020a00000a00100f000ed9000c08000b0000000000", 0x24) [ 2507.509398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58401 sclass=netlink_route_socket pig=5000 comm=syz-executor.5 [ 2507.559921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58401 sclass=netlink_route_socket pig=5001 comm=syz-executor.5 19:04:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x26}, 0x0) 19:04:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507747403e8dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:11 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000040)={'vcan0\x00', 0xd76d, 0x1}) getpid() gettid() r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:11 executing program 1: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000200", 0x24) 19:04:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) [ 2510.206474] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x48}, 0x0) 19:04:11 executing program 1: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0040030000", 0x24) 19:04:11 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0xfffffffa, 0x5, 0x4, 0x200000, 0x3f, {0x77359400}, {0x1, 0x0, 0x6, 0x5, 0x7, 0x2, "cebd4e97"}, 0xfffffffe, 0x4, @fd=r1, 0x8000, 0x0, 0xffffffffffffffff}) write$input_event(r2, &(0x7f00000000c0)={{}, 0x15, 0x6, 0x1f}, 0x18) 19:04:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x4a}, 0x0) [ 2510.385690] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x4c}, 0x0) 19:04:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfeff0000, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2510.558934] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 19:04:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x5a}, 0x0) 19:04:14 executing program 5: r0 = getpid() r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000080)=""/29) ptrace$peek(0x1, r0, &(0x7f0000000040)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = open(0x0, 0x14103e, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) setpgid(r2, r4) 19:04:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507747401eedfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0ffffff, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x6c) 19:04:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x60}, 0x0) 19:04:14 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x4) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040), 0xdb2e, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='veth1_to_hsr\x00') write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x68}, 0x0) [ 2513.287020] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2513.325229] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x6c}, 0x0) 19:04:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x70}, 0x0) 19:04:14 executing program 1: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c0800050000000000", 0x24) [ 2513.465729] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pig=5113 comm=syz-executor.5 [ 2513.707223] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x74}, 0x0) 19:04:17 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x0, 'veth0_macvtap\x00', {}, 0x2}) r2 = creat(0x0, 0x0) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004005) ftruncate(r2, 0x208200) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', r6}) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0xe80, {{}, 0x6}}}}}}}}, 0x6c) 19:04:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x3) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x9300}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) fcntl$getflags(r3, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000040)={r4, 0x27, "55224b3fa84b4262fbc479c24b02917715b7b388d0056e15d12c7aecdc0932a410fc479110e066"}, &(0x7f00000000c0)=0x2f) 19:04:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507747400f0dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x7a}, 0x0) 19:04:17 executing program 5: getpid() ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x8001, 0x1f, 0x7, 0x5}) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2516.343428] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa4}, 0x0) 19:04:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xf0}, 0x0) 19:04:17 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x4400c1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x2000, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000001c0)=0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r2, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x53}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000011}, 0x20040001) getpid() socket(0x400000000010, 0x3, 0x0) 19:04:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x190}, 0x0) [ 2516.830993] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:20 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7f, 0x10000) getsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000080)=""/63, &(0x7f00000000c0)=0x3f) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x26b}, 0x0) 19:04:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0xe80, {{}, 0x6}}}}}}}}, 0x6c) 19:04:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) r3 = open(0x0, 0x14103e, 0x0) r4 = creat(0x0, 0x0) ftruncate(r4, 0x208200) r5 = dup2(r4, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_BITS(r5, 0x80045005, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) write$tun(r3, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0xffff, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:04:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507747403f8dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x29c}, 0x0) [ 2519.400498] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x2b0}, 0x0) 19:04:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x2b2}, 0x0) 19:04:20 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) sendto$x25(r1, &(0x7f0000000040)="430816236c0ed5f2433d78091cf37a00feea73837761fc675ec0b1c499e8415736d0dd851c79fe28d2b5415a750d4ae24d12f7309d01c648f44a8c7eee0ad5979edb3a990d52a63930361cfac220f24a8ea3847f9e4445cdb0474fa2ee2961aedd0263537c4dd50f336396eed4b184b800056ef7dc25ed27d63cf4b33dd86e4d766c616c4ae7953ec700c44f82af", 0x8e, 0x80, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) 19:04:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x2fc}, 0x0) 19:04:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x300}, 0x0) 19:04:23 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x35a}, 0x0) 19:04:23 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000180)='./file0\x00', r3, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="f7460a4277945301e591363a088e8544992e332202fd8ebb8be77568cce1dd170a15332fb936b7722d0d1f568a0cd9bf718a5d4ecc2e2d726753f4e53c24e5548ffa6d61c7e9a104940d31fa649aba78c3659eba1f800e1d96ed9680e2a2b0d47e8f1d4dc895455536b434884fd6074ab8c64de146f900c2c233e00ceb5fac81a3cd7fbe4d41918d71c2e6574127b6a69f482728f0675f1cc90887d537", 0x9d) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000080)='./file0\x00', r3, r4, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r5, &(0x7f000000ac80), 0x66, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507747402fcdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0xe80, {{}, 0x6}}}}}}}}, 0x6c) 19:04:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) [ 2522.453059] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x382}, 0x0) 19:04:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x3ca}, 0x0) 19:04:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507747403fedfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x3f8}, 0x0) 19:04:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x500}, 0x0) 19:04:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x600}, 0x0) [ 2523.098123] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:26 executing program 5: getpid() socket(0x400000000010, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x800}, 0x20) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00736109000a00100f000ee1000c08000b0000", 0x24) 19:04:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x700}, 0x0) 19:04:26 executing program 1: getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000180)='./file0\x00', r3, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="f7460a4277945301e591363a088e8544992e332202fd8ebb8be77568cce1dd170a15332fb936b7722d0d1f568a0cd9bf718a5d4ecc2e2d726753f4e53c24e5548ffa6d61c7e9a104940d31fa649aba78c3659eba1f800e1d96ed9680e2a2b0d47e8f1d4dc895455536b434884fd6074ab8c64de146f900c2c233e00ceb5fac81a3cd7fbe4d41918d71c2e6574127b6a69f482728f0675f1cc90887d537", 0x9d) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000080)='./file0\x00', r3, r4, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r5, &(0x7f000000ac80), 0x66, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474fffedfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x2, 'netdevsim0\x00', {0x20}, 0x8753}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6c) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)={0x48c9, 0x24, [0xaa1e, 0x4, 0x200, 0x7, 0x1, 0x9, 0x1, 0x8041, 0x0]}) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200)) [ 2525.504212] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x900}, 0x0) 19:04:26 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0xd79}) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2525.645468] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:26 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffbff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4008014) getpid() r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000080)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000d784efbb6529a85cdce5fdeb3f6e7740c5e85b6ff3862266a6b3eef3253a5c0e3e11f9e5a73795c85aa0bd538dddce839cfc5239f8abf9e509228d76ae6e04643079a68a83fe737a830668861656a30aedfcf27d07173f2313b4a2a0b84cad6262c4e928674b889cac5b0cde422fd44e8992fd112193c7a2752b21e97ada7f4bfa63e9f7ba1756b2103639ec5973785a7119adab75147aa7e8d6c511c04b0fc0c83a96e17da4b0d199b5de23d3e2858f482fe1516d073fa233eb8b064ec76a7b1cc0c5a57c2d00f8f4c1dd83c33f32ba", 0xf4) 19:04:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa00}, 0x0) 19:04:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0) 19:04:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xab1}, 0x0) 19:04:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740fffdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:29 executing program 5: getpid() r0 = socket(0x400000000010, 0x9, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x18, 0x400, 0x70bd2c, 0x25dfdbfe, {0x8}, [@nested={0x4, 0x46}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:29 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0) 19:04:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc00}, 0x0) 19:04:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {}, {0xffe0}}}, 0x24}}, 0x0) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000410aa3dbfdcadfdef83ed5d22796fce2e59f03e6b2c8483367845a7fd21697ebcd43160ecf29de2fc5c15237c179d934630f9d0849144f70f903c5cdfacbd843f60a9bd76e8b6928aaace5d391fcc7078c2470538c401d665c76ded80064ff8d692fcd58bf3ae22615b40c63d45e9297b9e01e8c9e659fb07418d366ac6125102077603a2bfcfa837763b3607aabd4ca7818a7841a4e03c3e27bbf1c219718412accabde70953128d57dd3158523566253cd2272be70ce2caa3431d8b073a9c1d64eb4082f18ddd480764249c569547cab2aaef747859f1b3fe169277fa086b1b448f123d5f8b92b503bbf6b099875879e91661b9f4542cf55637b2f7dda3e892a7886607faf4d1afd74c879d3ce004bd2d97f8ffeb85ee0a9c4e0c4f41ee4e9b94d5559ec37137e11ce010a609548921f7c80e077ae4ef343d06954f1"], 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1, &(0x7f0000000680)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r7, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000014080)={0x18, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000303000000000000000600000018080000060000000000020000000000000000000000000000000000000000000000000000e937ae895da177ccabb6729fac99e920e3c9762abb0a270a5880ff722dc1a98cbe"], &(0x7f0000000180)='GPL\x00', 0x2, 0x5e, &(0x7f0000000280)=""/94, 0x41000, 0x7, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000014000)={0x5}, 0x8, 0x10, &(0x7f0000014040)={0x3, 0x2, 0x1}, 0x10, r8}, 0x78) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000060000008510000000000002ef640101fbffffff75741800000000006848ffff0400c900851000000000000095000000000000003c00ffff100000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x97, 0x0, 0x0, 0x1e00, 0x4, [], r4, 0x18, r5, 0x8, &(0x7f00000000c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0x101, 0x400}, 0x10, r8, r9}, 0x78) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@remote, @dev, @void, {@mpls_mc={0x8848, {[], @ipv6=@dccp_packet={0x0, 0x6, "bb8dd4", 0x315, 0x21, 0xff, @loopback, @private0={0xfc, 0x0, [], 0x1}, {[@fragment={0x12, 0x0, 0xfd, 0x1, 0x0, 0x10, 0x65}, @hopopts={0x3a, 0x1b, [], [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x3}}, @generic={0x40, 0xc8, "261c374b972cd9b1bbf4a912953c8507117e77584e739e0e967421c965d24a28697c0e9aa80ba8aa02315c0b5f7c16affce70814049108ff1846e80d85e0e6b399c6ee5ce05630eb21952f8e481df747b66fa37fe86cc2bb63d2e4e56c3ba22cdeda761dcb3dfa6eb7d028b110d105d1d7545c641e14767acadfc45e67204c78b2bc62b3e70cca2be9df07f0f4f209692466069b25eab7555a373d8203b04c597321f79859c05992265f0f52c31ff12969157c6bbd6aa0adb27d7072acd28584b4e43efacfaf0b01"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x4, 0x0, 0x80, 0x0, 0x0, 0x1a, 0x68}, @srh={0x3c, 0x2, 0x4, 0x1, 0x4, 0x58, 0x4a4, [@local]}, @dstopts={0x2c}, @fragment={0x32, 0x0, 0x1, 0x1, 0x0, 0x1b, 0x67}, @fragment={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @routing={0x84, 0x2, 0x0, 0x17, 0x0, [@remote]}, @routing={0x2f, 0x4, 0x2, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={[], [], @private=0xa010100}]}, @hopopts={0x2e, 0x13, [], [@padn={0x1, 0x1, [0x0]}, @generic={0x6, 0x51, "13dbade52b592b5dbbfcda057fdfe135d973f7f7ebac5e66fff98280a0a559e5ccf5be1cfc3f1dc32e497cdda9ef5b63d49b388ceb430a9b78017515c4cff31fdcadcf65572668109ea2a6edf06f423f42"}, @jumbo={0xc2, 0x4, 0x7fff}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0xfa}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}]}], {{0x4e20, 0x4e22, 0x4, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, "a5de0f", 0x3, "05d8ff"}, "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"}}}}}}}}, 0x34b) 19:04:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xe00}, 0x0) 19:04:29 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x80000019, 0x0, 0x0, 0x0) 19:04:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1200}, 0x0) 19:04:29 executing program 5: getpid() r0 = gettid() r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000000c0)={0x8, 0x7fff, 0x9, @remote, 'batadv_slave_1\x00'}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x24, 0x9, 0x100, 0x5, 0x400, 0x3ff, 0x5, 0xea}, 0x0) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r2, 0x19}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2528.727050] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1f00}, 0x0) 19:04:29 executing program 5: getpid() r0 = socket(0x400000000010, 0x800, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) ioctl$KIOCSOUND(r1, 0x4b2f, 0x6) [ 2528.965738] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:32 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x200) 19:04:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x2000}, 0x0) 19:04:32 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:32 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x80000019, 0x0, 0x0, 0x0) 19:04:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774747fffdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffe0000002f2835c8446395b0ad20420880b00000000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000600"/108], 0x6c) 19:04:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x2600}, 0x0) [ 2531.619180] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, "f6e6"}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xb00000000000000) 19:04:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x3f00}, 0x0) 19:04:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x4000}, 0x0) 19:04:32 executing program 5: getpid() r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)={0x70b, 0x1f, 0xcdb, 0x1000, 0x2, 0x9}) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x4800}, 0x0) 19:04:32 executing program 5: getpid() r0 = socket(0xf, 0x3, 0x80000) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x4a00}, 0x0) 19:04:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x4c00}, 0x0) 19:04:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474feffdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:35 executing program 5: getpid() socket(0x400000000010, 0x3, 0x0) r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) write(r1, &(0x7f0000000040)="4900000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420888b00000000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000600000000000000000000000800655800000000"], 0x6c) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfff, 0x101000) 19:04:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6e180600, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x5865}, 0x0) [ 2534.668311] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 19:04:35 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x40, 0x7f, 0x1, 0x5d, 0x7, 0x1f, 0x2, 0x2}, 0x0) getpeername(r0, &(0x7f00000000c0)=@l2tp, &(0x7f0000000140)=0x80) 19:04:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x5a00}, 0x0) [ 2534.739388] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x5a03}, 0x0) 19:04:35 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x53b000, 0x0, 0x0, 0x0) 19:04:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x6000}, 0x0) [ 2534.917664] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:38 executing program 5: prctl$PR_SVE_SET_VL(0x32, 0x3a0c6) getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="8124c8bda0bcfefa110a4a109878c55f2627226cb2edcfa3a02da0e9558a468931d1505c73ae5e7d3fe773e7387bf01953ca88ca13e0d2739867214c86868246e04b7211fd3642f82a827ce03dd11cc53347aa48a757747ff033e18a1bb4f000c7a6f7f1b63434c9e7bd7cee30f2e8352e34c04a0160f0dc9ae51bec7a54f78429644dc01f1549beb144a30fd1cc558ccb891695d0759b074ff3e4362081848d6e917d58f4942614ab643513e963c3c8c5783ecabba546f4dfbb0dabaedba31ebc37aec71d3588f600c8a9e9186d9054cc68b65c1d61bce527178d1809d9252914b58d70a228659aa1", 0xe9}, {&(0x7f0000000140)="d3500ff94cecef9afdce4affb42e3b81356bd04c490c3f22477b7aa2eab60929fdabd6c17500a37627e4d56bd8ae3a226064dbaefba657eb300638bf098ffdb35922f6b1835c6fa5319eff35d53e2f0cffe5334b454eefae4929b62e2331d6109ccfdb790aa5601c8e739036ae886ece0fdf3bc600e46980bccdde9d79eeddc262a16ac65faa5327eab1a0dbd7457e0e7812882b26d9414d786531ca00e607230fa72adabbd19e8c60dd2f02a26c9c68495be5a6004f3a3769bbe0885df873f9bddd0eb4e59dce0e3b66da31be8ed6b08e6775f187160835f1e7a77de372e48264e149567ffe469448a19b9788a36d7ef2b5", 0xf2}, {&(0x7f0000000240)="69ef09946f62691b9ef9ec2b3f01380eab9d451582544a4a87c1f934d65f1d7040b8e022acc2ce6bc09dce9eaa79c0177918c54d1bdbfa3c14d847137962e2e0f638f714629214", 0x47}, {&(0x7f00000002c0)="293bc98a80db08d289f89527966b4511471d05d05bac374971a7b0aeb0a583f59285d9ba50", 0x25}, {&(0x7f0000000300)="9e6e71fade31466f4d5292b85d9ed36301d88d6da141f8990646d53f61ed22511c6e8b717eca1ad7334da92a9c97b006c7d5492ee0c24a2cb789692cdbf6aea3542e4ad9ca3221328ea992ee0b252de39cc2a2d659841e4dd93a662019eeab97e18fde3ad0bb3f828eaeadddd55add8f84426f30c1ee3a7c07a3769da32548610a96e1c44162ff5f5ed65b6572baccbf66a9915f4cdb2bb33e4a48423e7c5effc07f2f76b15dffd51a6dafcd6fca8b03", 0xb0}, {&(0x7f00000003c0)="96ffae809bab5df89f2495af0a748568a0a189786b4caa41c935f7c54036fad511dcc3e5fef0b5a3cd2e4b97535658d048ba2ccaf32f0260f29e3669", 0x3c}], 0x6, 0x2) 19:04:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x6558}, 0x0) 19:04:38 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x53b000, 0x0, 0x0, 0x0) 19:04:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740002dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000002c007e64d59c5d94270d00"/26, @ANYRES32=r7, @ANYBLOB="0000000000000000e0ff0000090001007273767000000000200002001c00060018000100090001006373756d000000000400028004000600"], 0x50}}, 0x0) sendmsg$xdp(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, 0x0, r7, 0x23}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="fdd86f089cfe04a8ed5cf2faa0eb47947aa3bc434948347c9fcdada8ae90e57d2306988a751544e5059f5b6585c3ec409cd8ae56f5d15d9cafdb6931ee29bd55abbb2bc839241a00f25a52b6922490a230b4f51ab9174ae48e49ba1d622b6676f91f36e6adbc12cce4322a1698086b99cf334711495b42e9afb1611f728f011690e47ab6a9fb519ba54466ec8f9f76556509ae7cd98a7466ff0f40ffd5dff45a8be3ab5bcae16d7dbc88968544cb6b86523b900609b46ba14fa5eed660360e", 0xbf}], 0x1, 0x0, 0x0, 0x4000}, 0x100) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:04:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x6800}, 0x0) [ 2537.736708] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:38 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x500, 0x0, 0x0, 0x0) 19:04:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x6b02}, 0x0) 19:04:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x6c00}, 0x0) 19:04:38 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0) r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r1}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e23, 0x1, @empty}}}, &(0x7f0000000140)=0x84) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000180)={r2, 0x2e, "e27f3e83494af7f41f8e08bbd451158974b3353d0b904505ebf20a6e728872a2e682472176b2d8498eb4e37f58f7"}, &(0x7f00000001c0)=0x36) getpid() r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:38 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x6, 0x0, 0x0, 0x0) [ 2537.965722] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000200)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x7000}, 0x0) 19:04:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740003dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:41 executing program 5: getpid() r0 = socket(0x26, 0x0, 0x0) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000000c0)) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) fsync(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:04:41 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x6, 0x0, 0x0, 0x0) 19:04:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x7400}, 0x0) [ 2540.828650] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x7a00}, 0x0) 19:04:41 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x37, @any, 0xb9b, 0x2}, 0xe) 19:04:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x8087}, 0x0) 19:04:41 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x6, 0x0, 0x0, 0x0) 19:04:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x8100}, 0x0) 19:04:44 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000200)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:44 executing program 5: getpid() r0 = open(0x0, 0x14103e, 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x4e889000) sendto$inet(r0, &(0x7f0000000040)="56282e14558ef8f4b4ec8f63008535c252dd0b18ed9c3a25baf0fbbbba5a8c8ad3856a44da5b352d1059e87645ace2f4bfae048dea9fbec7d999347d3e2bd2c82cdacad76fead0e20391490d097a8a4edec99c254f9387bacfc050a3dc94dfce66308ba44284e51ed618129a786979f456320f75e47f7b814e6d4433e27bb62cdc61726bfaf4a2571d9a26d7a1d9376afe0d654e122fac70ac35bfefcf9140bc", 0xa0, 0x14, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000140)=0x3, 0x4) 19:04:44 executing program 1 (fault-call:2 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:04:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x8203}, 0x0) 19:04:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740004dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ipvlan1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x10000, 0x200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'wg0\x00', 0x1000}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x6c) [ 2543.901194] FAULT_INJECTION: forcing a failure. [ 2543.901194] name failslab, interval 1, probability 0, space 0, times 0 [ 2543.912622] CPU: 1 PID: 5733 Comm: syz-executor.1 Not tainted 4.19.120-syzkaller #0 [ 2543.920426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2543.929782] Call Trace: [ 2543.932072] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2543.932381] dump_stack+0x188/0x20d [ 2543.943379] should_fail.cold+0xa/0x1b [ 2543.947285] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2543.952402] ? __mutex_lock+0x3cd/0x1300 [ 2543.956473] ? find_held_lock+0x2d/0x110 [ 2543.960554] __should_failslab+0x115/0x180 [ 2543.964803] should_failslab+0x5/0xf [ 2543.968523] kmem_cache_alloc+0x44/0x710 [ 2543.972600] ? iov_iter_advance+0x219/0xe10 [ 2543.977024] __build_skb+0x39/0x300 [ 2543.980664] __napi_alloc_skb+0x1cc/0x310 [ 2543.984827] napi_get_frags+0x5e/0x130 [ 2543.988728] tun_get_user+0x15c1/0x4930 [ 2543.992737] ? tun_build_skb.isra.0+0x1960/0x1960 [ 2543.997590] ? find_held_lock+0x2d/0x110 [ 2544.001660] ? lock_downgrade+0x740/0x740 [ 2544.005820] ? check_preemption_disabled+0x41/0x280 [ 2544.010849] tun_chr_write_iter+0xb0/0x147 [ 2544.015096] __vfs_write+0x512/0x760 [ 2544.018821] ? kernel_read+0x110/0x110 [ 2544.022724] ? avc_policy_seqno+0x9/0x70 [ 2544.026793] ? selinux_file_permission+0x87/0x520 [ 2544.031647] ? security_file_permission+0x84/0x220 [ 2544.036587] vfs_write+0x206/0x550 [ 2544.040134] ksys_write+0x12b/0x2a0 [ 2544.043767] ? __ia32_sys_read+0xb0/0xb0 19:04:44 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x9, 0x8) set_thread_area(&(0x7f0000000040)={0x7, 0x100000, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1}) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9001}, 0x0) 19:04:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9c02}, 0x0) [ 2544.047834] ? __ia32_sys_clock_settime+0x260/0x260 [ 2544.052861] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2544.057625] ? trace_hardirqs_off_caller+0x55/0x210 [ 2544.062652] ? do_syscall_64+0x21/0x620 [ 2544.066645] do_syscall_64+0xf9/0x620 [ 2544.070455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2544.075652] RIP: 0033:0x45c829 [ 2544.078849] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:04:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa400}, 0x0) [ 2544.097751] RSP: 002b:00007f713facac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2544.105462] RAX: ffffffffffffffda RBX: 000000000050d000 RCX: 000000000045c829 [ 2544.112738] RDX: 00000000200001ac RSI: 0000000020000140 RDI: 0000000000000003 [ 2544.120009] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2544.127279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2544.134552] R13: 0000000000000d13 R14: 00000000004cf457 R15: 00007f713facb6d4 19:04:45 executing program 5: r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) getpid() r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb002}, 0x0) [ 2544.218960] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:47 executing program 1 (fault-call:2 fault-nth:1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:04:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000200)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:47 executing program 5: getpid() r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0xfff, 0xb, 0xee8, 0x0, 0x7fffffff, 0x8, 0xa5b}) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0xfffffdc4) 19:04:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00001000000000000800000086dd080088be000000001000000001000000000000000800eeeb000000002000000006000000000000000000ffe00800655800000000"], 0x6c) 19:04:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb10a}, 0x0) 19:04:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740005dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:47 executing program 5: getpid() r0 = socket(0x4, 0x1, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000040)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x6, @multicast}, 0x40, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000100)=0x1, 0x4) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) ioctl$int_out(r3, 0x2, &(0x7f00000000c0)) 19:04:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb202}, 0x0) [ 2546.964990] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xca03}, 0x0) 19:04:48 executing program 5: getpid() r0 = gettid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) rt_tgsigqueueinfo(r0, r2, 0x12, &(0x7f0000000300)={0x41, 0x800, 0xfffffff9}) socket(0x400000000010, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=""/170, 0x169, 0xaa, 0x1}, 0x20) write(r3, &(0x7f00000002c0)="2427142000727ed4ff1c0165ff00fc020a00000a00100f800ee1000c08000b00006f0d49d2000000", 0x28) 19:04:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xf000}, 0x0) 19:04:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740006dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2547.276333] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2547.366533] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x7, &(0x7f0000000200)="f71559c80aa4ce"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:50 executing program 5: r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) getpid() r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xf803}, 0x0) 19:04:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:04:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f00000001c0)={0x0, [0x5, 0x93c, 0x7ff, 0x1000, 0x8, 0xfff, 0x7, 0x8, 0x5dc5, 0x9be, 0x1ff, 0x800, 0x1, 0x3, 0x7, 0x800, 0x0, 0x0, 0x6, 0x2, 0x800, 0x1000, 0x1, 0xbb, 0x2af, 0x7, 0x0, 0x81, 0x5, 0xe, 0x1, 0x400, 0x3, 0x7ff, 0x4, 0x7f, 0x1ff, 0x7, 0x0, 0x4, 0x9, 0x4a, 0x200, 0x0, 0x6, 0xd4, 0x9, 0x7f], 0x6}) write$tun(r0, &(0x7f0000000340)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x1, 0x9]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x2, 0x40, 0x7], "6202d4673cf13521793959b8b829023a2460472b6afc5a0a9708f230e3493849e4cf445db658773e67f8346a643fd5a3e2601e07279304772ab67ed4f9a4be00873b6b6d95308c9381bfabf87f27ac02c4c9b2fb5d7cd653516b08236ac6"}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x6}}}}}}}}, 0xd2) 19:04:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740007dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xfc02}, 0x0) 19:04:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xfeff}, 0x0) [ 2550.058415] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xff0f}, 0x0) 19:04:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xff7f}, 0x0) 19:04:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2, 0xe80}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:04:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xfffe}, 0x0) 19:04:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x7, &(0x7f0000000200)="f71559c80aa4ce"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740008dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:04:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c18a}, 0x0) 19:04:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:04:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2, 0x3f00}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:04:53 executing program 5: getpid() r0 = socket(0x1d, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x444400, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0x20, 0x4, 0x0, 0x9, 0x1}) r2 = open(0x0, 0x14103e, 0x0) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="ff03000064dff5775c5ce7149cfb84b5d218340910a81eca94dcf732a2c4634c23d78587565a41c9571797028e732fc1b0ff27b27245f3a8a4f596f5fb3dd2eed7bc35591f80c20aa515cfe65b7d92af20992e46b8fab49b80992d0760c0f5b5e267fb", @ANYRES16=r4, @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x6}, 0x58, {0x2, 0x4e20, @private=0xa010101}, 'netpci0\x00'}) r5 = creat(0x0, 0x0) r6 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r6, 0x0) read$rfkill(r6, &(0x7f0000000180), 0x8) ftruncate(r5, 0x208200) write$FUSE_WRITE(r5, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x8001}}, 0x18) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) ftruncate(0xffffffffffffffff, 0x208200) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x79, 0x1}, 0x7) 19:04:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c18b}, 0x0) [ 2553.126978] can: request_module (can-proto-0) failed. [ 2553.165477] can: request_module (can-proto-0) failed. 19:04:54 executing program 5: getpid() r0 = msgget(0x3, 0x104) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000040)=""/137) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c18c}, 0x0) [ 2553.211243] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c18d}, 0x0) 19:04:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c18e}, 0x0) 19:04:54 executing program 5: getpid() socket(0x400000000010, 0x3, 0x0) r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) write(r0, &(0x7f0000000040)="c6e5f32440000021002551071c0165ff00fc020a00000a00100f000ee1000c08060000b73e0000", 0x31) 19:04:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x7, &(0x7f0000000200)="f71559c80aa4ce"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:04:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c18f}, 0x0) 19:04:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2, 0x800e}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:04:56 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x20000, 0x0) getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x1}, 0x4) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:04:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x163002) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f00000000c0)={0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) ioctl$SIOCNRDECOBS(r1, 0x89e2) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:04:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740009dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2556.107810] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c190}, 0x0) 19:04:57 executing program 5: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="f8f565d182349c66ac8384c540ab5bdd212c9b9c4af5f6643218bfbd8ec871c335cdf52e8ee8bc8cda227277ff68ee6805752b91218372004c54ec5027cd840c", 0x40) getpid() write(0xffffffffffffffff, &(0x7f0000000000)="24000000210025510100342fdb56d0b71c1e0200"/36, 0x24) 19:04:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c191}, 0x0) 19:04:57 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x4000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='$\'lo\x00') getpid() r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2556.293939] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:04:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c192}, 0x0) 19:04:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474000adfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2556.463095] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:00 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xa, &(0x7f0000000200)="f71559c80aa4cefd3b79"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c193}, 0x0) 19:05:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@int=0x5, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:05:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:00 executing program 5: getpid() r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$peekuser(0x3, r1, 0x7fff) ptrace$cont(0x7, r0, 0x0, 0x0) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x8) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474000cdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:00 executing program 5: getpid() r0 = socket(0x1, 0x6, 0x40000004) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000080)=""/227) [ 2559.164994] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c194}, 0x0) 19:05:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c195}, 0x0) 19:05:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c196}, 0x0) 19:05:00 executing program 5: r0 = getpid() ptrace$setopts(0x4206, r0, 0x5, 0x100078) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="2400000021002563071c0165ff00c802bd9281000000d132ce0a00000a00100f000ee1000c", 0x25) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x208200) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00!\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000030000000600000008000700e000000215000100370a0000632f706172746974696f6e73000000000800020007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x98, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @multicast1}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x10004801) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x400c0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x4, @vbi={0x80, 0x8, 0x8, 0x56595559, [0x6b, 0x8], [0x9, 0x6], 0x108}}) r6 = creat(0x0, 0x0) getpgrp(r0) ftruncate(r6, 0x208200) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 19:05:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c197}, 0x0) [ 2559.421739] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xa, &(0x7f0000000200)="f71559c80aa4cefd3b79"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c198}, 0x0) 19:05:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474000edfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:03 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1bb043, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x5}, 0x4) r1 = creat(0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000001c0)={'vxcan1\x00', {0x2, 0x4e21, @multicast1}}) ftruncate(r1, 0x208200) r2 = creat(0x0, 0x0) ftruncate(r2, 0x2081ff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x2000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77666445d86aaf3b64e3502942220d78bdd86e6f3d", @ANYRESHEX=r2, @ANYBLOB=',appraise,seclabel,permit_directio,\x00']) getpid() r3 = socket(0x400000000010, 0x3, 0x0) r4 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r4, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x100000000, 0x1}) socket$inet6(0xa, 0x0, 0xb46) getpid() write(r3, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) waitid(0x1, 0x0, &(0x7f0000000280), 0x1, &(0x7f0000000300)) uselib(&(0x7f0000000200)='./file0\x00') 19:05:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:03 executing program 3: getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r0}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r0, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r0, 0x3f, 0x10, 0x9, 0x8}, &(0x7f0000000180)=0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) r3 = open(0x0, 0x14103e, 0x12) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) r4 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'lo\x00', 0x2000}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101100, 0x0) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0001ff01070001040300ab01624630045e880988ad44ba698b89a7354a0c6aebe394cc818a33c48f2ec920420a9b63c25eb1d69c0723ebc58cbcd1fbde3eb5c9fe633eaae7efeb21f6eb9bd61687cd41799b42c8df46284d4f729b64dadc77656e2d81bbb9bbb1767d24e6e9a5e559c7d082"], 0x72) ioctl$KVM_SET_TSC_KHZ(r5, 0xaea2, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0081001e0008004500005a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be00000000100000000100000000000000080022eb000000002000000006000000000000000000000008006558000000002f478249db0374b22dc38749eb67941562e7be2890093d758fa8607b7fde118aaee8123433485fc8d3c5bfd45c6e38aa4f5d0f0dbe945f09b72a9a2950237b1a5421de1cd70b36be3e1e13f768776776c6c4d020"], 0x70) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) 19:05:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c199}, 0x0) [ 2562.227056] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:03 executing program 5: getpid() r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) tkill(r2, 0x18) fgetxattr(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="747275737465642e5b2876ffff786e657431000917b362aaf7621cbf92a13f7ef1fe56a0418df63ef13deeb9300af93cd2e362387172c29c2234ff7c46b174d3d70bd592fade27c01df7212d24a88d191b5133fd8e362c9b46219dee"], &(0x7f0000000080), 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x2, 0x9, 0x0, 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c19a}, 0x0) [ 2562.332059] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) sched_getattr(r2, &(0x7f0000000040)={0x38}, 0x38, 0x0) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) r4 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r4, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x62000, 0xff, {0x0, 0x2710}, {0x2, 0x97ace732ca0dd517, 0x4, 0x0, 0x0, 0x5, "f6941223"}, 0x7, 0x3, @userptr=0x9, 0x4a1a8b90, 0x0, r4}) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f00000000c0)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x6080, 0x0) 19:05:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740010dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:03 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2562.522233] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2562.851568] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:06 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xa, &(0x7f0000000200)="f71559c80aa4cefd3b79"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c19b}, 0x0) 19:05:06 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a8, 0x17, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2b}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4004814}, 0x20000000) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x2, 'veth0_to_batadv\x00', {0x3}, 0x4}) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xa, {0xa, 0xe9, 0x7}}, 0xa) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:05:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740012dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c19c}, 0x0) [ 2565.287981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pig=6226 comm=syz-executor.5 [ 2565.314439] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c19d}, 0x0) 19:05:06 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) 19:05:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c19e}, 0x0) [ 2565.399414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pig=6241 comm=syz-executor.5 19:05:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c19f}, 0x0) 19:05:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2565.642079] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:09 executing program 3: r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x110, 0x3f, 0x93, 0x1, 0x9}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:05:09 executing program 5: getpid() r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, &(0x7f00000000c0)=0x80, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000100)=0x1, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1a0}, 0x0) 19:05:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740018dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0xe80, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2568.304536] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1a1}, 0x0) 19:05:09 executing program 5: r0 = socket(0x400000000010, 0x3, 0x0) r1 = open(0x0, 0x14103e, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0x6, "299b2dc8ec2b05f2c2b5a87d6dc9ca3abd8afde8"}, 0x16, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x400000, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000180)={0x7, 0x79, 0x2}, 0x7) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000100)={r4, 0x7}) [ 2568.405107] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1a2}, 0x0) 19:05:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1a3}, 0x0) 19:05:09 executing program 5: r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x1000, 0x4) getpid() r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1a4}, 0x0) 19:05:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x3f00, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1a5}, 0x0) 19:05:12 executing program 5: getpid() socket(0x15, 0xa, 0x6) r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) write(r0, &(0x7f00000000c0)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000dac7fa9cb11230da79b923ae06004812155e1c74c82d6fbf7068af3e06", 0x41) 19:05:12 executing program 3: r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r3 = syz_open_dev$ndb(&(0x7f0000002240)='/dev/nbd#\x00', 0x0, 0x800) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1f) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x104c) r4 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r4, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000200)=""/21, 0x15, &(0x7f0000003440)=""/4099, 0x2, 0x1}}, 0xffffffffffffff58) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f00000001c0)={0x2, 0x4, [0x8ba]}) 19:05:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740048dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1a6}, 0x0) [ 2571.385669] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:12 executing program 5: r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000140)=0x20) getpid() r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000080)="2400000021002551071c010f000ee1000c08000b0000000000b4a6698cc5377631fbb7e3fa8d3eb23f517f0cef108e00038df42f183acf720afc6678c08dc043b71586a1fd2c4b51208431fc9178c606cbfb44ef9619afbb4ebf970890c672612f44bf382883b7d10774d125df3a677b4d5ec435a98eeb72192e0d481abdce0c7175f6ffc884432e5b586da6a316c54466ef15672cb97000"/162, 0xa2) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)) 19:05:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1a7}, 0x0) 19:05:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1a8}, 0x0) 19:05:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1a9}, 0x0) 19:05:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x800e, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:15 executing program 5: getpid() r0 = socket(0x2b, 0xa, 0xfffffffc) personality(0x5000002) tkill(0x0, 0x36) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', r2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) fchown(r3, 0x0, r4) getgroups(0x1, &(0x7f0000000000)=[r4]) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, r2, r4}, 0xc) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000040)={r6, 0x4, 0xff, "a172b12a83edf1d62f64d47576b384a320feb8e4a09fa5369a6e809ea9df56394436069f3f85b27b888cdfc90daf5b732a0ede632ccdc3e92371ccc3cb3913c307bc4adf736a9c9148bd313e75a4f93d02bccd56e2171590951e1da2b177f3ed1e4a2daacf945ebff247637ed2ada251b02f3fc83d592a5bf1a619018ed54cc307f0d7ebeddff881589359997d8f5e1c4cfcd4e9ea1e1e5c5dff4845006e965b1f3246a475eea11ffafcece180e7c5518b03cd4405cd6e42fdfe1923a2ff24af1997b2e3804792e6883266230f47"}) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2a3) 19:05:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1aa}, 0x0) 19:05:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474004adfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1ab}, 0x0) [ 2574.451417] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:15 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 19:05:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1ac}, 0x0) 19:05:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474004cdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1ad}, 0x0) 19:05:15 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000d00)=[{&(0x7f0000000180)=0x2}, {&(0x7f00000001c0)=0x1}, {&(0x7f0000000200)=0x1, 0x1}, {&(0x7f0000000240)}, {&(0x7f0000000280), 0x1}, {&(0x7f00000002c0), 0x1}, {&(0x7f0000000300)=0x2}, {&(0x7f0000000340), 0x1}, {&(0x7f0000000380), 0x2}, {&(0x7f00000003c0)=0x2, 0x2}, {&(0x7f0000000400)=0x1}, {&(0x7f0000000440), 0x2}, {&(0x7f0000000480), 0x2}, {&(0x7f00000004c0)=0x2, 0x2}, {&(0x7f0000000500), 0x2}, {&(0x7f0000000540)=0xffff}, {&(0x7f0000000580)=0x2, 0x2}, {&(0x7f00000005c0)}, {&(0x7f0000000600)}, {&(0x7f0000000640)=0x1}, {&(0x7f0000000680)=0x2, 0x2}, {&(0x7f00000006c0)=0x2, 0x2}, {&(0x7f0000000700)}, {&(0x7f0000000740)}, {&(0x7f0000000780)=0x2, 0x2}, {&(0x7f00000007c0)=0x1}, {&(0x7f0000000800)}, {&(0x7f0000000840), 0x1}, {&(0x7f0000000880)=0x2, 0x1}, {&(0x7f00000008c0)=0x2, 0x1}, {&(0x7f0000000900), 0x2}, {&(0x7f0000000940)=0x1, 0x2}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=0x1, 0x2}, {&(0x7f0000000a00), 0x1}, {&(0x7f0000000a40), 0x1}, {&(0x7f0000000a80)=0x1, 0x1}, {&(0x7f0000000ac0)=0x2}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)=0x1}, {&(0x7f0000000b80)=0x1, 0x1}, {&(0x7f0000000bc0)=0x1}, {&(0x7f0000000c00)=0x2, 0x2}, {&(0x7f0000000c40), 0x1}, {&(0x7f0000000c80)=0x1, 0x2}, {&(0x7f0000000cc0)=0x1, 0x2}], 0xd, 0x2e, &(0x7f0000001000)={0x77359400}, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="68000000040a010300000000000000000200000708000540fffffffc08000a40000000020900010073797a31000000000ae80600726f7574650000002c000480400000000000000069703665727370616e30000000000000000000000000000000000000000000003360941f6adea88c14abb4a9f3d7d54ec48fdf"], 0x68}, 0x1, 0x0, 0x0, 0x24004045}, 0x4000001) [ 2574.734019] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1ae}, 0x0) 19:05:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0xe80, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:18 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) r2 = accept$inet(r1, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x401}, 0x8) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474004edfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) read$char_usb(r1, &(0x7f00000001c0)=""/118, 0x76) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:05:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1af}, 0x0) [ 2577.526772] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1b0}, 0x0) 19:05:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1b1}, 0x0) 19:05:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1b2}, 0x0) 19:05:18 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x8000, 0x0) getpid() r0 = open(0x0, 0x14103e, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r1}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x8201, 0x1ff, 0x1, r1}, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) r2 = accept$netrom(r0, &(0x7f0000000240)={{0x3, @netrom}, [@netrom, @netrom, @default, @rose, @default, @bcast, @null, @rose]}, &(0x7f00000000c0)=0x48) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000100)=0x2) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) flistxattr(r3, &(0x7f00000001c0)=""/122, 0x7a) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140)={0x8, 0x7, 0x4, 0x20, 0x9, 0x3, 0x1, 0x6, 0x0, 0x7a, 0x5, 0x3f, 0x40, 0xad}, 0xe) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1b3}, 0x0) [ 2577.898265] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1b4}, 0x0) 19:05:21 executing program 5: getpid() r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_SCAN_SSIDS={0x54, 0x2d, 0x0, 0x1, [{0x6, 0x0, [0x13, 0x1e]}, {0x6, 0x0, [0xf, 0xd]}, {0x9, 0x0, [0x5, 0x10, 0x19, 0xc, 0x9]}, {0x5, 0x0, [0xf]}, {0xa, 0x0, [0x3, 0x18, 0x0, 0x16, 0x2, 0xd]}, {0x6, 0x0, [0x4, 0x6]}, {0x6, 0x0, [0xa, 0x4]}, {0x8, 0x0, [0x1, 0x4, 0x14, 0xf]}, {0x5, 0x0, [0x6]}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000000}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000c10}, 0x20000080) r3 = socket(0x400000000010, 0x4, 0x6) write(r3, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x3f00, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740060dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x20, 0x2, [@TCA_RSVP_ACT={0x1c, 0x6, [@m_csum={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x20, 0x2, [@TCA_RSVP_ACT={0x1c, 0x6, [@m_csum={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000007c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x140, 0x0, 0xeb6bd28469576fc3, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x81}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x8917}, @void, @eth={@random="9f84bb57964b", @remote, @val={@val={0x9100, 0x3, 0x0, 0x2}, {0x8100, 0x6, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0x0, 0x0, 0x1}, {0xef8, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x3f}, {0xfffc0}], @generic="dff337c893e6dd78cd04c3e32fc03c974f1ce9d1982e7bdfc76afaab87076afe6ed83509f021cfb11eff0bd92b9ccf472522804dc562c6b19d57ff"}}}}}, 0xb6) 19:05:21 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x5) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1b5}, 0x0) [ 2580.684653] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1b6}, 0x0) 19:05:21 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000021002551071c01060000fc020a00000a00100f000ee1000c08000b0000000000d9040d53f0e80b4831f75538c7afa1883b874f883f457fdeb3bcbf142b8f977f901b9441fb9b56c1b41416b674163174e99c095836683b287feb4a3f5ee6a8bbfe1fe39b365f9f7b82640de601839c7ba6c28d5a98d79dba8826cd42bdb721451f9ad1f23b3d40313fae57d89a939fe89e7987eabbf6c35151ca3f40712af351f03fff44d26f9c3189dc9a668eff26ad81f2308689b889d74ee244e7c4e397fab045cd95ddfa091054eb846c974c8f1bfa93166a", 0xd8) 19:05:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1b7}, 0x0) [ 2580.874981] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1b8}, 0x0) 19:05:24 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x0, 0xf3, 0x3, 0x5, 0x7, 0x4}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x78) 19:05:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x800e, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1b9}, 0x0) 19:05:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740068dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000400)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x14, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x72, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x7}, {@private=0xa010100, 0x401}, {@multicast2, 0x3ff}, {@empty, 0x888a}, {@broadcast, 0x3}, {@empty, 0x6}, {@broadcast, 0x4}]}]}}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0xa6) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000001c0)={0x4, "f33ba3148885198cb4a9e0f37717dd418619ddd0e29c02334e5bd305b7c0e6e7702fd2e6ad59b0d4aa708b829b91a267c5bf592fd54fbdb8bfdd258aa401ead8d3825e7feaac39bf0dbd41c791b5770fe6e86611c7110db273bf8b3e6a4b5d6d8b34ec13688ec8ae8cf76424c25ff78fcf20f3cd87c08f16e0f81bd1f86c61221d92b2f169f4cf06b711c232c64459e7aca9666a64c08e61af1c76df93e9b956adc856c584690bf6528dfc0089dcbab72ec6ccfca93621e1eb3d5cda528733efddd625504f15a6dd7922decaeb5cac7c1ac1ccfc41f1d8ac17718b59a97b521f40c16ca261c4753f1992865711401ac68f5df2d6a8d49c206933f7bea6ad12811695fe4ee437b95dfe8ed3e9f79124fb32c80eeedf28d9fa692d490e52737d9ee13e677d48e2fa3622836792149a88d46f9e1984a4d7bc420a5a7b80214691db88f41a8573c950d216a9a8368ce25851df6cdc6c32a5e0ca2b9d6f41b7cdf19dfec316fb63bf34a8d4ac08663bf885b24f8007f040b1ed0d4e6a6aa00e61a57a52500c7663d0d5d34ffe52b2cc3cc3dc8f5fb3f0f38406ea1708cdb2531fc5889d6cec2b415478b9625261a7e2ade8df2101ab7886cc4dd77ea894be08d438b5bf4586614b257e9e839d3408a2cd2a4684b73ccb5a341d891b90bb035da3cc80ca694ccd74b8c02944250d78ab14f9e1c072920178513380275317b562bfaeb5"}) 19:05:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1ba}, 0x0) [ 2583.678299] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1bb}, 0x0) 19:05:24 executing program 5: getpid() socket(0x400000000010, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x232000, 0x1000}, 0x20) write(r0, &(0x7f0000000000)="2400020021002551071c0165ff00bc020a00000a00100f000ee1000c087f6b0000000000", 0x24) 19:05:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1bc}, 0x0) 19:05:24 executing program 5: getpid() r0 = socket(0x4, 0x80000, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1bd}, 0x0) 19:05:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2584.039460] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:27 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) 19:05:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1be}, 0x0) 19:05:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) syz_extract_tcp_res(&(0x7f0000000040), 0x0, 0x7ff) 19:05:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740069dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1bf}, 0x0) [ 2586.723049] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1c0}, 0x0) 19:05:27 executing program 5: getpid() r0 = socket(0x40000000001c, 0x4, 0x8) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1c1}, 0x0) 19:05:27 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x5, 0x48) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1c2}, 0x0) [ 2587.006199] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:30 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x4000, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x4) getpid() r1 = semget$private(0x0, 0x4, 0xa90) semctl$GETNCNT(r1, 0x1, 0xe, &(0x7f0000000000)=""/229) socket(0x400000000010, 0x4, 0xffffffff) 19:05:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1c3}, 0x0) 19:05:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474006cdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000480)={@val={0x2}, @void, @eth={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x8000]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "aedf9d9c2d4414a858cf5f68a7a91638176aca2fac71037eb43c4e07eb79ee90ccf2401a73130d1413074f7adacee2cc571d006408d5b2120e21da3c5f969f6f2d7404ef48d937a9a6c0293ad49bddc28147b68b782930d4b08d021a7046bb052454a1921c76dc7cf682c901ddeffea8ced7970aae13aef2d23338f9c69642ef4375977e16960fb9532998e748f1099f73106ebf4fb1a4"}, {}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x4}, 0x6, {0x0, 0xfc00}}}, {0x8, 0x6558, 0x0, "608dca469bc2beffe35bd533f0b71e59dcdb929d14076b3bc65bb0f74e94fba70a8d07338f04005a0e4cc38c6d5e5432f4abf3f29e3e5815d90b08f5033b5a114263f870b11899872d5a682e6f87ffe17371f7db988154ccc478f36af362e84f4a458ca8558fbee3b75ac52ea2e35c76cad236210357ceef807b739bdcd128b4da90927a44ce15766958f327c5b17051bf52fda145930afab06cb9bd8c8f4224b234e90a7a496a5ad3f438c2d70514636e847574073da75568daa1608d8fe8f2cc4c2a23a91e7c74adc2d40da3c094dce20394dd1599dc290dd8d1d729fc1becb2fc0f3f5ef957ad30c0656f9aeaef4bba3a7764347d791ed9cda3a31f3362d9eee47657f4ac529b72674b23"}}}}}}}, 0x20f) 19:05:30 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x9f0000, 0x81, 0x1c0000, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa10906, 0x7, [], @ptr=0x100}}) ioctl$TCSBRKP(r1, 0x5425, 0x8) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) [ 2589.773845] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1c4}, 0x0) [ 2589.906341] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1c5}, 0x0) 19:05:30 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000040)="6c90527c54c6cc0929e4f03cd6ffe4909f0a2d1f1d552309ea6a71c6443ce09579ed3b743fbf36b3b2d44352d5cf8fa4c3520af8096f34a48b1f195723f9a667e19a64266b193ba5c59996aa35f4d644eadbe0ffcee7e0fd30cbfd10942db8b0d9713ef9ba3ec044e84122847368aaa33334cac9a93451b90c34ab2f7b0d781a060cd9fd60148ab5324965a5f15a6f80fd2cea4d66763bc8bac0edc58545c3c31a94eb682bc45a9074d725ff0c0aba01e2c38c1573804b6c5fd3c3488b1c210806c276e552bcd8e2ac0a934cfe9bd384ec", 0xd1) bind(r0, &(0x7f0000000140)=@generic={0x26, "14add6756beba1f433ebb3a1460582351beff69a4555d6dfb81eeaf0f7f20180502d6bfab32cf25e3674e9560a32b22f555ffb0bcc4bffaf4126eeb7160429d545a9c72d697f43b02389daa0ed98b8c4e31570d60aa1bc50dee4b9035085ba9c62553c168c4792f7423f7a2e72bdf2e6053a591e68816a4e364d09cfc4f4"}, 0x80) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) 19:05:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474006fdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1c6}, 0x0) [ 2590.099550] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1c7}, 0x0) 19:05:33 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740070dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1c8}, 0x0) [ 2592.874603] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1c9}, 0x0) 19:05:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740074dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1ca}, 0x0) [ 2593.086570] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1cb}, 0x0) [ 2593.199283] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:34 executing program 5: getpid() r0 = socket(0x27, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000380)=0x100, 0x4) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002abd7000fedbdf25020000000800050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4040) pwrite64(r0, &(0x7f0000000040)="c9352c8b2fcdd9f8f4b27ba0583e5f7075592f470903a3d124d22522ebac114fb60e5dd3cdeabc66a6b73e6e0ea56f5d54760e7458ad0ab3624927b8e5a419dce817a1b55fd8683a6d905db8180a511afb59f46cf7c821832446e61dd963df1a0bba210143bd2065606aa1a0aeb61bafdb1ad2d72ea0805b233f67a60d3cd1846011b105c49f2379e880954598bdf24f0d348c96a29aaca62c41ca58444ad67e986aea416616986338e77ce31cdcf75065ada1d82f8d82a8c125d8bd56324d3e9b94196c10cc02e43a5f7c9f1ef09fccaa70e3c8a33ad6385bc29ddb84ca8823351feda2e414ac0a81", 0xe9, 0x1000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48001) 19:05:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1cc}, 0x0) 19:05:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474007adfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:36 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) syz_init_net_socket$ax25(0x3, 0x0, 0xc3) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x300, r2, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6a79}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x31e3}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7fff, @private0, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x45, @private1, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x16}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe3c8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa38}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf6b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x428}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x20000080}, 0x804) 19:05:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x30c) r2 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000140)=""/30) 19:05:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1cd}, 0x0) [ 2595.875839] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:36 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x4, [0x5, 0x800, 0x8db, 0x2]}, &(0x7f0000000100)=0xc) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x101000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xffffffff, 0x0, 0x0, r2}) 19:05:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1ce}, 0x0) 19:05:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1cf}, 0x0) 19:05:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000507747400badfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:37 executing program 5: r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r1}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r1, 0x10000}, 0x8) getpid() r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2596.134421] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2596.282624] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:39 executing program 5: getpid() openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x165e03, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) poll(&(0x7f0000000240)=[{r0, 0xc2c3374e4295f7bf}, {r2, 0xa0}, {r3, 0x4000}], 0x3, 0xffff8001) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x7, 0x3, 0x4, 0x400, 0xbc, {0x77359400}, {0x5, 0x8, 0x1f, 0x5, 0x3, 0xf3, "3b36a9bf"}, 0x9, 0x4, @userptr=0x8001, 0xc95, 0x0, r2}) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x1, 0x7, 0x101, 0x0, 0x0, {0x12680feacfdf79b0, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000840}, 0x4) 19:05:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1d0}, 0x0) 19:05:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa62501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000004c0)={@val={0x2, 0x883e}, @void, @eth={@random="9f84bb57964b", @dev, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x217, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xed, 0x0, [0x0], "f02e9e27757a6419735b1941f29addb6c61e33f000850f6e51f9b401af17dacb31954c285c0e730076cd26de50ef6420ffd9effb204e2c21cd63a57822d0b6c9a52d84ece628bceb98c126f3519d85b0608321c500d1eadef271fdb9215b58b8d62c510b98b4ced0610fa461ccdeeff1b4ebdf5d6f452cdb903085a9c153503ebc8e5a839927fbf65e6ccf170fd6eda47284dc859d73b4086516126cd598c58b1a28f553e9d3dd04b85d770e55c5912509183eab67ff957dd30e95d002f8f31af21e30d37acbb4e9f2363670bfacea0f32747ad385620557796cb16bf51ec8ec690761aad0e0e9ab2f4ebb653f"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "004cf3a87ea1c877fa562e20b348ded02724569c98bab264d916f8e8407040308b992716e408f7dd0fd2ec4325584c8e93c5e7a39fc3b2a63c5447e0c7cc0e39ea4b4a027426023319c45e2afb61cac2c61bc4f296841f146618b672b907"}, {}, {}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x6}}, {0x8, 0x6558, 0xfffffffe, "ee6f36cbf937a186f316c9681c987684dfff029531d87fe7e215dece84955b24a61bda21351b97837be70a93c740c8e9349632c0f6b992ca04c0941f2986939be68a975d480dc61ee2ea4a805c63d117e44fc6fd538f7bb169c91e94a6402990db85674a860e155178f0a402ba540013f31e"}}}}}}}, 0x22d) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x600c01, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r4, 0xfffffffe}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) [ 2598.887285] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1d1}, 0x0) 19:05:39 executing program 5: getpid() r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xa10000, 0x1, 0x6, r1, 0x0, &(0x7f0000000040)={0x9a0901, 0x9d19, [], @value64=0x7}}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1d2}, 0x0) 19:05:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1d3}, 0x0) 19:05:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1d4}, 0x0) [ 2599.107919] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:40 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) r2 = dup2(r1, r1) sendto$unix(r2, &(0x7f0000000040)="cf93119653a13fe06164639d7a4eee3fc4e2f0856ec5432f7a58a18f8ef7c1ee8f915e1292ebd86a8e17825403b0e7e5b1d6105021f46fc94b062256f272f47013695b20c1", 0x45, 0x8004, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getpid() r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 19:05:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65502a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1d5}, 0x0) 19:05:42 executing program 3: r0 = semget(0x2, 0x4, 0x100) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0xf8c6, 0x8]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a000000000029904abd3208ffac1e00010420880b00000000000000000800000086dd080088be00000000100000000100000000000000080022eb000000002000000006000000000000000000000008006558000000005461a51dea34fe6fd9a571f409afe86fb3522d5ca4d799aaf4e0f7d32de30b54f17407b4e6a24e"], 0x6c) 19:05:42 executing program 5: getpid() r0 = socket(0x400000000010, 0x5, 0x2) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x12200, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000080)={0x5, 0x0, 0x200, 0x400, 'syz0\x00', 0x2}) 19:05:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1d6}, 0x0) 19:05:42 executing program 5: getpid() r0 = socket(0x400000000010, 0x4, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2601.946437] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65503a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1d7}, 0x0) 19:05:43 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000040)={'ip6tnl0\x00', 0x7, 0x5}) 19:05:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1d8}, 0x0) [ 2602.156859] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2602.518562] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 19:05:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1d9}, 0x0) 19:05:45 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x602400, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r2) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="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"], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', r7}) getsockname(r5, &(0x7f00000003c0)=@ax25={{0x3, @rose}, [@null, @bcast, @remote, @remote, @bcast, @default, @rose]}, &(0x7f00000000c0)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', r8}) 19:05:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x10132) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r4, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xcd, 0x20200) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'nr0\x00', 0x800}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r3, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:05:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65504a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1da}, 0x0) [ 2604.995682] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2605.027907] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000010000060400094a9d54dfa1b029adee3fe1ded5ac1414aa01942b0000000000f3b32341"], 0x20) 19:05:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1db}, 0x0) 19:05:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65505a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1dc}, 0x0) 19:05:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1dd}, 0x0) [ 2605.259320] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2605.398394] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 19:05:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xe80, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1de}, 0x0) 19:05:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) connect$rose(r2, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x40) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:05:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65506a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:48 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x7) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1df}, 0x0) 19:05:49 executing program 5: getpid() r0 = socket(0x2, 0x100003, 0x40) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2608.091123] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1c1e0}, 0x0) 19:05:49 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x108, 0x464, 0x10, 0x70bd2c, 0x25dfdbfb, "7b4c5f235e51fe2fdbdcb6389f32891e1c9a5a64732a4059bf1d8b8e16d71943d0045f589faa7957dc57826d29a8af0531be537ad1b1faf75f9f89940c7700d3d39cbfdfbe3f485694ca7e718315d5bc51535a2f59fe465bd0c1cdbba8c1765ca17bfa1984aff1884342d8d20647c3f750bb63be873c119a999693065d92dfedbfe8d7b7dd50601e817e9192e6d8fd2fc25758463f4aad836da48eb33214be046513932fbdff97344256b5a0432132c27cd11794a065f0fafcc80bc64b4a964498b16a98463ef782416194d7867d5394038af2d3e19e7b2503ae174990fcfb4449b762e4783675ff75826d70c748ddf365b485a9d121", ["", "", "", "", "", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x8001}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x314}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c811}, 0x440d0) 19:05:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x20000}, 0x0) 19:05:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x40000}, 0x0) [ 2608.359326] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2608.375804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pig=7285 comm=syz-executor.5 [ 2608.455896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pig=7278 comm=syz-executor.5 19:05:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 19:05:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x3f00, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1fffff}, 0x0) 19:05:51 executing program 5: r0 = getpid() r1 = socket(0x400000000010, 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$peekuser(0x3, r2, 0x6dbbd82b) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000012c0)={0x0, 0x0}) prlimit64(r4, 0x5, &(0x7f0000000140)={0x2, 0x4}, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r5 = creat(0x0, 0x0) ftruncate(r5, 0x208200) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000040)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000013c0)={&(0x7f0000001340)=""/88, 0x230000, 0x1000, 0x8}, 0x20) connect$llc(r1, &(0x7f0000001400)={0x1a, 0xffff, 0xc7, 0x8, 0xfa, 0x4, @remote}, 0x10) process_vm_writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/89, 0x59}], 0x1, &(0x7f0000001280)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/211, 0xd3}], 0x3, 0x0) 19:05:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65507a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000600000100000000000000000800655800000000"], 0x6c) r2 = open(0x0, 0x14103e, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x20, 0x2, [@TCA_RSVP_ACT={0x1c, 0x6, [@m_csum={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) recvfrom$packet(r2, &(0x7f0000000200)=""/190, 0xbe, 0x12141, &(0x7f00000002c0)={0x11, 0x3, r3, 0x1, 0x80, 0x6, @remote}, 0x14) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040)=0x100, 0x4) r4 = creat(0x0, 0x0) ftruncate(r4, 0x208200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r5, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r5, 0x1, 0x3ff}, &(0x7f00000001c0)=0xc) 19:05:52 executing program 5: r0 = getpid() r1 = socket(0x23, 0x1, 0x3) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r2 = open(0x0, 0x14103e, 0x0) tkill(r0, 0x2e) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0xa5ecc000) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80054d1e, &(0x7f0000000040)) 19:05:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xf0ffff}, 0x0) [ 2611.159478] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:52 executing program 5: r0 = getpid() r1 = socket(0x400000000010, 0x3, 0x0) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:05:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1000000}, 0x0) 19:05:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x2000000}, 0x0) 19:05:52 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2611.567123] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 19:05:55 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) init_module(&(0x7f0000000400)='systemwlan0vboxnet0(P\x00', 0x16, &(0x7f0000000440)='rsvp\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000e4d72c3461153937e70afb48b88368fe140593d3afe5a0198ae51649c95c598d25d449d817753b71f0bf1379e035ba68f0d5f74be769b71eafc4d5fb1d2dc986b0e9744154", @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000240007050000004007a2a2ee16d6268d0800000000000000cf0aa95a05000000", @ANYRES32=r4, @ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x20, 0x2, [@TCA_RSVP_ACT={0x1c, 0x6, [@m_csum={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) r5 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) r6 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', r7, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000040)={0x2, 0x4, {0xffffffffffffffff}, {r7}, 0x7fff, 0x5726}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@loopback, @in6=@loopback, 0x4e20, 0x8001, 0x4e20, 0x3, 0x2, 0x20, 0x20, 0x32, r4, r8}, {0x7f, 0x81, 0x100, 0x6, 0xee, 0x200, 0x3, 0x1}, {0x5, 0x8, 0x9, 0x1}, 0x100, 0x6e6bba, 0x0, 0x1, 0x3}, {{@in=@multicast2, 0x4d2}, 0xa, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x3504, 0x3, 0x2, 0x6, 0xffffffff, 0x1, 0x1}}, 0xe8) 19:05:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x800e, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x3000000}, 0x0) 19:05:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65508a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xa6}, 0x6}}}}}}}}, 0x6c) 19:05:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x4000000}, 0x0) [ 2614.217357] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x5000000}, 0x0) 19:05:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x6000000}, 0x0) [ 2614.321502] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 19:05:55 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='wchan\x00') accept4$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x800) r2 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(r2, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) [ 2614.372271] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 19:05:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x7000000}, 0x0) 19:05:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:55 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x3c}}, {0x14, 0x4, @remote}}}]}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xfe}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xe4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xa7c}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xffffff81}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7ff}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_LABELS={0x4}, @CTA_ZONE={0x6}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x989}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x802}, 0x4045) [ 2614.587375] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 19:05:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000180)={0x4}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'veth0\x00', {0x7, 0x0, @rand_addr=0x64010100}}) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) write$tun(r0, &(0x7f0000000240)={@val={0x2, 0x17}, @void, @x25={0x3, 0x7f, 0x0, "487ded76f745a8f34cf73c082767d4a5b7e75a6eb2621a96542bc08bdc168561fc95baf5276639d1ed32133c6921feb3414682a42d27f23b07c14268a595a059cda7b37d8e4df16d4b6a75e05d971880ff65d4b417f04b30f73138357af4e4ffee1eb7d2ed3750b123927431399de7d64d122ecfd1f97a6c285a08d2e90ea0d94a9662cc51b2970ed76abe0b413f47edd2f07fc73ba7a99af5da25174291faec99e629c33e829bed76fd12cfa9f3c51480044a092e2da84f083dcd4c8519504a3ca213564c509527dc7ab83c7af0c6564699"}}, 0xd9) 19:05:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x8000000}, 0x0) 19:05:58 executing program 5: getpid() r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:05:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65509a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0xe80, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:05:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9000000}, 0x0) 19:05:58 executing program 5: getpid() socket(0x6, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) syncfs(r1) [ 2617.276714] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65503a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:05:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa000000}, 0x0) [ 2617.390488] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:05:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc000000}, 0x0) [ 2617.443131] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 19:05:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xe000000}, 0x0) 19:06:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 19:06:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x10000000}, 0x0) 19:06:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa6550aa381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3f00, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) r2 = open(0x0, 0x14103e, 0x0) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f00000000c0)={0x4, 0x1000, 0xfc01}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000040)) 19:06:01 executing program 5: getpid() r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xa10000, 0x1, 0x6, r1, 0x0, &(0x7f0000000040)={0x9a0901, 0x9d19, [], @value64=0x7}}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a00000a00100f000ee1000c08000b0000000000", 0x24) 19:06:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x12000000}, 0x0) 19:06:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740068dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2620.350071] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x1f000000}, 0x0) 19:06:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x20000000}, 0x0) 19:06:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x26000000}, 0x0) [ 2620.505622] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 19:06:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x3f000000}, 0x0) [ 2620.755756] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be00000000100000000100000000000000080022eb000000002000000006000000000000000000000008006558000074c3"], 0x6c) 19:06:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474000edfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa6550ba381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x800e, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x40000000}, 0x0) 19:06:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005077474000cdfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x48000000}, 0x0) [ 2623.369341] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 19:06:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x4a000000}, 0x0) 19:06:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x4c000000}, 0x0) 19:06:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x5a000000}, 0x0) 19:06:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x5a030000}, 0x0) 19:06:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x60000000}, 0x0) [ 2623.698445] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2623.724208] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 2623.856845] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:04 executing program 5 (fault-call:10 fault-nth:0): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:06:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x65580000}, 0x0) 19:06:04 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa6550ca381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2d, 'rdma'}, {0x2b, 'rdma'}, {0x2b, 'memory'}, {0x2abd3744230bd66a, 'pids'}, {0x2d, 'cpu'}]}, 0x25) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) rt_sigsuspend(&(0x7f00000003c0)={[0x4]}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x4080) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffe0, 0xfff5}, {0x89a6a627c1b33206, 0x7}, {0x3, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x20, 0x2, [@TCA_RSVP_ACT={0x1c, 0x6, [@m_csum={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$can_raw(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r7}, 0x10, &(0x7f0000000240)={&(0x7f0000000400)=@canfd={{0x5, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "eae10d56429ddb5a4057de9b6952753b4948eb627e4ea7f61a13863128b35403bdd0ab03f08cd915a4384299a175216a498b4e60db580a6d90739490294039bf"}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x10) 19:06:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x68000000}, 0x0) [ 2624.072173] FAULT_INJECTION: forcing a failure. [ 2624.072173] name failslab, interval 1, probability 0, space 0, times 0 [ 2624.072218] CPU: 1 PID: 7671 Comm: syz-executor.2 Not tainted 4.19.120-syzkaller #0 [ 2624.072227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2624.072232] Call Trace: [ 2624.072259] dump_stack+0x188/0x20d [ 2624.072281] should_fail.cold+0xa/0x1b [ 2624.072300] ? fault_create_debugfs_attr+0x1e0/0x1e0 19:06:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x6b020000}, 0x0) [ 2624.072317] ? __lock_is_held+0xad/0x140 [ 2624.072341] __should_failslab+0x115/0x180 [ 2624.072358] should_failslab+0x5/0xf [ 2624.072370] __kmalloc+0x2d3/0x770 [ 2624.072440] ? vc_uniscr_copy_line+0x4b0/0x4b0 [ 2624.072454] ? set_selection+0x7d0/0x1220 [ 2624.072471] ? __might_fault+0x192/0x1d0 19:06:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x6c000000}, 0x0) [ 2624.072486] ? screen_glyph_unicode+0xe2/0x2a0 [ 2624.072502] set_selection+0x7d0/0x1220 [ 2624.072520] ? sel_loadlut+0xf0/0xf0 [ 2624.072542] tioclinux+0x110/0x470 19:06:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x70000000}, 0x0) 19:06:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x74000000}, 0x0) [ 2624.072565] vt_ioctl+0x1940/0x2500 [ 2624.072585] ? complete_change_console+0x390/0x390 [ 2624.072601] ? avc_has_extended_perms+0x9c6/0x1030 [ 2624.072627] ? find_held_lock+0x2d/0x110 [ 2624.072641] ? avc_ss_reset+0x180/0x180 [ 2624.072658] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2624.072675] ? complete_change_console+0x390/0x390 [ 2624.072695] tty_ioctl+0x7a1/0x1420 [ 2624.072711] ? tty_vhangup+0x30/0x30 [ 2624.072728] ? mark_held_locks+0xf0/0xf0 19:06:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa6550ea381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2624.072745] ? proc_fail_nth_write+0x95/0x1d0 [ 2624.072757] ? proc_cwd_link+0x1d0/0x1d0 [ 2624.072788] ? tty_vhangup+0x30/0x30 [ 2624.072805] do_vfs_ioctl+0xcda/0x12e0 [ 2624.072820] ? selinux_file_ioctl+0x46c/0x5d0 [ 2624.072832] ? selinux_file_ioctl+0x125/0x5d0 [ 2624.072848] ? check_preemption_disabled+0x41/0x280 [ 2624.072861] ? ioctl_preallocate+0x200/0x200 [ 2624.072875] ? selinux_file_mprotect+0x600/0x600 [ 2624.072889] ? __fget+0x340/0x510 [ 2624.072907] ? iterate_fd+0x350/0x350 [ 2624.072939] ? security_file_ioctl+0x6c/0xb0 [ 2624.072956] ksys_ioctl+0x9b/0xc0 [ 2624.072972] __x64_sys_ioctl+0x6f/0xb0 [ 2624.072986] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2624.073002] do_syscall_64+0xf9/0x620 [ 2624.073022] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2624.073034] RIP: 0033:0x45c829 [ 2624.073049] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2624.073058] RSP: 002b:00007f3ea0352c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2624.073073] RAX: ffffffffffffffda RBX: 00000000004ee880 RCX: 000000000045c829 [ 2624.073083] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000005 [ 2624.073092] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2624.073100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2624.073108] R13: 0000000000000575 R14: 00000000004c8090 R15: 00007f3ea03536d4 [ 2624.082283] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2624.084287] selection: kmalloc() failed [ 2624.230693] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2624.405224] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:07 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:06:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0xe80]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x7a000000}, 0x0) 19:06:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa6550fa381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:07 executing program 2 (fault-call:4 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) r4 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r4, &(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB="e9c6a72a3bc8e91280ce22677103d4125bc6c5308109eea60f55000000006efd7e9e126982854635a63dae85cacfb353dc41361fc27f94cef584187d4fd5e953630d56a7b98a05d843f16cc768160d9d1fc6e0a8ca536ffce88499e16872b9625ccd78bee1c8fb796468ea37798e9983c0e91800d1d7f50de471c251299f942ec4461c47cdb0f3ed658cb601d37a8f5bd274fc1e699d0c519e", @ANYRESDEC=r4], 0x6c) 19:06:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x81000000}, 0x0) [ 2627.111189] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x82030000}, 0x0) 19:06:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x87800000}, 0x0) 19:06:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65510a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x88a8ffff}, 0x0) [ 2627.371685] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2627.476456] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0xe, 0x0) 19:06:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x3f00]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x2, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x8ac10100}, 0x0) 19:06:11 executing program 3: r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000300)="bb34ec7ae13fa9526981b180b9", &(0x7f0000000340)=""/162}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = creat(0x0, 0x0) ftruncate(r3, 0x208200) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40200, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x1, 0x0) r4 = creat(0x0, 0x0) ftruncate(r4, 0x208200) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@private2, @in6=@private2}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa000800455a1300000000299078ffffffffac1e00010420880b008e8ad0dc51ac8d86ec3d000000000000000800000086dd0c00883f0f77d684b6800d554a00a2472a0000000000080022eb00000000200000000600"/111], 0x6c) 19:06:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65511a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x8bc10100}, 0x0) [ 2630.200726] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x8cc10100}, 0x0) 19:06:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b2f, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x8dc10100}, 0x0) 19:06:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x8ec10100}, 0x0) 19:06:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b30, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) [ 2630.560393] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x8fc10100}, 0x0) 19:06:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65512a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b31, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x800e]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:14 executing program 3: r0 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0xf5, 0x0, "8026f6fd4c0c6c0dd93d56d7813f6a5dca30d9f525d7a9ae12f2fd0906105304e0ec74ab4ad9341a40253ba440a6efa7ff6e29db8fd0db724fe811d9ea195623eeefce0ce0d10ddfd65d7f3ebf3b17c8a1786e37f2eba4516d4ddc9f7fe53d745925e7e7ef0b5fae20c20420d3c251e9d16d9ec051e891b38538d8b0b7317f81da86befb56867ae4b1959a2020eaf8ca04564bfa5e925de4e3476bbd4b887bb09b587a99f17486df05c046b74296d6b3bca657e8398fb60c92697583d05dac5e778fb90a23809c01ae83222e769d0fc995d61f41d003b50e030dc51d16271a3ea2d6f1079dffa2c5d0f969285328761351f6701c9921dc18d122d759377b58f9", 0x9, 0x48, 0x3, 0x80, 0x9, 0x66, 0x6}}}, 0x120) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:06:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0xe00, 0x0) 19:06:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x90010000}, 0x0) 19:06:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x90c10100}, 0x0) 19:06:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x91c10100}, 0x0) 19:06:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b32, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) [ 2633.338195] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x92c10100}, 0x0) 19:06:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65513a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2633.501465] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x1000000, 0x0) 19:06:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b33, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x93c10100}, 0x0) 19:06:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65514a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:17 executing program 3: r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7ff, 0x0, 0x7, 0x0, 0x1, "667badaebdbdc3d5c6647cbff8ec084743f70a", 0xdf4, 0xdc5}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) fcntl$setflags(r2, 0x2, 0x1) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0)=r0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:06:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2636.276805] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x94c10100}, 0x0) 19:06:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0xe000000, 0x0) 19:06:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65515a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b34, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x95c10100}, 0x0) 19:06:17 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) accept$ax25(r0, 0x0, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be0000000010003d3de62e00000100000000000000080022eb000000002000000006000000e9ff00000000000008006558000000002f085201e3d609025f2b54cae4cb5a49247d607a028fc3973c00002e54046fb4b37a378428a2b5482748dffbdb9bede41a75b976e515d71c8a6d7afa7d13f5f603adb9b7f536c070"], 0x6c) 19:06:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0xfeffffff, 0x0) [ 2636.495827] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b35, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x96c10100}, 0x0) 19:06:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x97c10100}, 0x0) 19:06:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x98c10100}, 0x0) 19:06:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b36, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) [ 2636.804072] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x99c10100}, 0x0) 19:06:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65517a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b37, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000001c0)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @udp={{0x1a, 0x4, 0x1, 0x22, 0x16d, 0x65, 0x0, 0xff, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101, {[@timestamp_prespec={0x44, 0xc, 0x36, 0x3, 0x6, [{@empty, 0x8a}]}, @timestamp={0x44, 0x4, 0xe4, 0x0, 0x5}, @lsrr={0x83, 0xb, 0x13, [@loopback, @local]}, @lsrr={0x83, 0xb, 0x70, [@empty, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x14, 0x41, 0x3, 0x5, [{@broadcast, 0x2df}, {@local, 0xc9}]}, @rr={0x7, 0x17, 0xf3, [@local, @multicast2, @loopback, @loopback, @loopback]}]}}, {0x4e20, 0x4e22, 0x105, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x0, @val=0x80}, "58f1c211b3c8200482d3543a1e2d06c214cc9d1ce5013a5c4573cc537a6a4acc0e98ab4130eb7d75d04e03f563a78b3a0a7d59eb8b7c55f21745985bea5916cf397ba751dffad2ada84106fe64ab4528aee216a9217e66d7bfb124003ba87226b3d5248119859b379cc82448dad17edc67991443235e7631cf4cfd9c3747750cb2d0ee2d0aa669867708ac99bdd93b478bde184d67722c29e9a1bd062234b3256cd6a2a0fe024d490d1d5748994eab8de4f52af6644750facc2bd8ec58ed939fe650c62f7b9752a8f42034feb1bb51d3993d51387255e5583d9656113725e779f4a239d1a25b9d55e4a749ab4c29694266018bd098"}}}}}}}, 0x17f) 19:06:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9ac10100}, 0x0) [ 2637.029810] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2637.203997] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9bc10100}, 0x0) 19:06:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:20 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0xfffffffe, 0x0) 19:06:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b3a, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65518a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) sendmsg$AUDIT_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x3e8, 0x800, 0x70bd2b, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) 19:06:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9c020000}, 0x0) [ 2639.627448] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b3b, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9cbba7ba}, 0x0) [ 2639.769655] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b3c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9cc10100}, 0x0) 19:06:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b3d, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9dc10100}, 0x0) 19:06:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b40, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:23 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x100000000000000, 0x0) 19:06:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9ec10100}, 0x0) 19:06:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa6551aa381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6, {0x0, 0xffff}}}}}}}}}, 0x6a) 19:06:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b41, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9effffff}, 0x0) 19:06:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0x9fc10100}, 0x0) [ 2642.819623] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b44, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa0c10100}, 0x0) 19:06:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b45, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0xe00000000000000, 0x0) 19:06:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa1c10100}, 0x0) 19:06:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b46, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) 19:06:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa6551da381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b47, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa2c10100}, 0x0) [ 2645.803100] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa3c10100}, 0x0) 19:06:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa4000000}, 0x0) 19:06:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa4c10100}, 0x0) 19:06:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b48, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa5c10100}, 0x0) 19:06:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65539a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b49, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:29 executing program 3: r0 = creat(0x0, 0x0) ftruncate(r0, 0x208200) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:06:29 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x8000000000000000, 0x0) [ 2648.840939] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa6c10100}, 0x0) 19:06:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa7c10100}, 0x0) 19:06:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b4a, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa8c10100}, 0x0) [ 2649.039153] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xa9c10100}, 0x0) 19:06:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000001c0)={{0x80, 0x2}, {0x3, 0x6}, 0x2, 0x2, 0x3}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:06:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b4b, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0xfeffffff00000000, 0x0) 19:06:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa6554aa381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xaac10100}, 0x0) 19:06:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b4c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', r3, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, r3) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x404281) r5 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r5, &(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYRES64=r5], 0x6c) 19:06:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xabc10100}, 0x0) [ 2651.909202] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0xffffffff00000000, 0x0) 19:06:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xacc10100}, 0x0) 19:06:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b4d, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) [ 2652.034619] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xadc10100}, 0x0) 19:06:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xaec10100}, 0x0) 19:06:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa6554ba381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b4e, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xafc10100}, 0x0) [ 2652.310020] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb0020000}, 0x0) 19:06:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x68) 19:06:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb0c10100}, 0x0) [ 2652.684416] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0xe) 19:06:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b52, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb10a0000}, 0x0) 19:06:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65570a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x5, 0x77e, [0x0, 0x200001c0, 0x20000524, 0x20000682], 0x0, &(0x7f0000000040), &(0x7f00000009c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000050000005000000000f8726f736530000000000000000000000076657468305f6d616376746170000000766574683157766c616e0000000000006e7230000000000000000000000000000bc59b6ca51e000000ff00ff0180c200000300ffffff00ffa6000000d6010000260200007265616c6d000000000000000000000000000000000000000000000000000000100000000000000007000000ff0f000001000000000000005345434d41524b000000000000000000000000000000000000000000000000000801000000000000010000002000000073797374656d5f753a6f626a6563745f723a68616c645f736f6e797069635f2af313769df596ba2f657865635f743a733000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000049444c455475fd455200000000000000000000000000000000000000000000002800000000000000eafaffff73797a3100000000000000000000000000000000000000000000000001000080000000000500000020000000884776657468315f746f5f68737200000000626f6e643000000000000000000000006970766c616e31000000000000000000726f7365300000000000000000000000aaaaaaaaaabb00ffff00ff00aaaaaaaaaa2500ffff0000ffbe000000be0000000e0100006e66616363740000000000000000000000000000000000000000000000000000280000000000000073797a3000000000000000000000000000000000000000000000000000000000e7e3a7aeffffffff49444c4554494d4552000000000000000000000000000000000000000000000028000000000000000700000073797a30000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff01000000050000002000000060037465616d300000000000000000000000626174616476300000000000000000006d61637674617030000000000000000065727370616e30000000000000000000bbbbbbbbbbbbffff00ff0000aaaaaaaaaaaaff00ff0000ff6e000000e60000002e0100005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000030600000000000081000000000000004e46515545554500000000000000000000000000000000000000000000000000080000000000000001000000000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000225fa452cb3b6a8d70a1a5470c51623738c0fdcd296416abe596276c7201000000000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff010000000900000000000000080576657468315f766972745f77696669007866726d3000000000000000000000006d61637365633000000000000000000076657468300000000000000000000000aaaaaaaaaabbffff00ffffff0180c2000003ffffff000000a60000001e0100004e010000636c7573746572000000000000000000000000000000000000000000000000001000000000000000010100000600000007000000010000004e465155455545000000000000000000000000000000000000000000000000000800000000000000c00e0000000000004552524f5200000000000000000000000000000000000000000000000000000020000000000000000e1f61c2a01b2ba6a7cd2366149bfeb72d4db33737ade07368eb79a47f450000434c41535349465900000000000000000000000000000000000000000001000008000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff0100000005000000400000000011726f736530000000000000000000000076657468305f746f5f6272696467650064756d6d79300000000000000000000076657468315f6d616376746170000000aaaaaaaaaa17ff00ffff0000ffffffffffff00000000ff00d6000000d60000000e010000636c757374657200000000000000000000000000000000000000000000000000100000000000000000100000ff0300000008000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000002010000000000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000f0ffffff00000000ffffffff00000000"]}, 0x7ff) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x6}}}}}}}}, 0x6c) 19:06:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb1c10100}, 0x0) 19:06:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb2020000}, 0x0) [ 2655.167346] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb2c10100}, 0x0) 19:06:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b60, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65571a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb3c10100}, 0x0) [ 2655.387496] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2655.434913] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0xe00) 19:06:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb4c10100}, 0x0) 19:06:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b61, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8200aa000c004500005a0000000b00000000000000000800000086dd080088be00004000100000000100000000000000080022eb0000000020000000060000ebffffffff9055e5cd8bdf0f4196ffffff000800655800000001aaa4d03471ceba751655698e443c8a090ca3be6891efc7bcd7ea9960605ba125541ee2e389993bfa1fd787b608806eb397d5e0f553bc464d29cc804496"], 0x6c) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x80000001}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0200e9ff4b74cc094dd88e0785076c263c1f1bf843ba7fe0cf581dde72397332cd77d1d9e9931e7b73a363a1bf2060cee27ed89d3d0106f6b1aaa48004904e93f77cd06c30a89512ecf7e5c255b8a9eb985c759ffd20cba6efea25e20ca82a182f6c1a6cd6d30f422ea5029af2b896af7e4d9d7e072f", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x40, 0x54}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r4, 0x7}, &(0x7f00000000c0)=0x8) 19:06:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ff70002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb5c10100}, 0x0) [ 2658.169035] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb6c10100}, 0x0) 19:06:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b62, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb7c10100}, 0x0) 19:06:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ff80002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb8c10100}, 0x0) [ 2658.414839] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2658.511404] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x1000000) 19:06:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b63, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xb9c10100}, 0x0) 19:06:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) fstat(r1, &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) 19:06:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0200810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xbaa7bb9c}, 0x0) 19:06:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xbac10100}, 0x0) 19:06:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xbbc10100}, 0x0) [ 2661.332150] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b64, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xbcc10100}, 0x0) 19:06:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xbdc10100}, 0x0) [ 2661.509708] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xbec10100}, 0x0) 19:06:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0xe000000) 19:06:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0xe80}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be000000001000000001000000000000000800000000000000000000000800655800000000"], 0x6c) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x408800, 0x0) 19:06:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b65, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff1400810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xbfc10100}, 0x0) 19:06:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc0c10100}, 0x0) 19:06:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc1c10100}, 0x0) 19:06:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b66, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) [ 2664.372014] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc2c10100}, 0x0) [ 2664.464178] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b67, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0202810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2664.583962] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2664.655870] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:48 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0xfeffffff) 19:06:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc3c10100}, 0x0) 19:06:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x3f00}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b68, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0302810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) write(r4, &(0x7f0000000040)="63de", 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000580)={0x0, 0xf4, "6c7a4e5c120a40203ab875e6d48f783047124e3269a292fdc2e599d96c494d903446097c149640c957cda8fceb1838aef2c00e118a8b19ad5aec9230f93ce9fbed6154bbcd6735dca4e49c846d0dbfc88c99e197bbdd6c2520b16efce8e971527e2470f8e40c5fb5293e21a081ceafa3646380a152ff1b52e78c16407cb97ac17ad1af78db1fe800d7d7dcea8a2480fa04eb237600b66c2e81ed28c7e112d1c61c6d0bd2af0d91cc7cdbf23f3cc2fd9d466bf6f06160515d97cc38bda9f18b5f01beeec4146f19ecc5922fe51f4da0f7368c6d68c62ad22789c88c8760970e0d2d2bd5d873850e7d1cd2527bcd29aada690a08a3"}, &(0x7f0000000680)=0xfc) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000006c0)={r5, 0x7, 0x400, 0x8}, &(0x7f0000000700)=0x10) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b0000000000000000080000008600100000000100000000000000080022eb00000000200000000600000000000000000000000800655800"/108], 0x6c) 19:06:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b69, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc3ffffff}, 0x0) [ 2667.332324] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc4c10100}, 0x0) 19:06:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc5c10100}, 0x0) [ 2667.517622] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc6c10100}, 0x0) 19:06:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b6a, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0xfffffffe) 19:06:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x800e}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0402810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x6c) 19:06:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc7c10100}, 0x0) 19:06:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b6b, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc8c10100}, 0x0) 19:06:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xc9c10100}, 0x0) [ 2670.445476] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b6c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0502810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x1000000}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xca030000}, 0x0) [ 2670.637138] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x100000000000000) 19:06:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b6d, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088ae00000000100800000100000000000000080022eb00000000200000000600000000000000000000000800655800000000"], 0x6c) 19:06:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xcac10100}, 0x0) 19:06:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0602810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x3f000000}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xcbc10100}, 0x0) [ 2673.444422] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b70, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xccc10100}, 0x0) 19:06:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xcdc10100}, 0x0) 19:06:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xcec10100}, 0x0) 19:06:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b71, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) [ 2673.656086] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0xe00000000000000) 19:06:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x800e0000}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:06:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000001c0)={[{0x1000, 0x3f, 0x1, 0x9, 0x1, 0x80, 0x6, 0x7, 0xff, 0x7a, 0x2, 0x8, 0x1}, {0x6, 0x1f, 0x0, 0x5, 0x7, 0x64, 0xc9, 0x4, 0x4, 0x3f, 0xfd, 0xff, 0x80000000}, {0x3, 0x6, 0x0, 0x3, 0x1f, 0x0, 0x5, 0x7b, 0x7, 0x1, 0x0, 0xff, 0x400}], 0x8d}) 19:06:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0702810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xcfc10100}, 0x0) 19:06:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b72, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) [ 2676.453437] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:06:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xd0c10100}, 0x0) 19:06:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4bfa, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xd1c10100}, 0x0) 19:06:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0802810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:06:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4bfb, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:06:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xd2c10100}, 0x0) [ 2676.835065] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:07:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x8000000000000000) 19:07:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xd3c10100}, 0x0) 19:07:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:07:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5409, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:07:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'nr0\x00', 0x200}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x6c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14) 19:07:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0902810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:07:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xd4c10100}, 0x0) [ 2679.551097] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:07:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x540b, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) [ 2679.653368] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:07:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r4, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfb15}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4bdf}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x40850) write$tun(r0, &(0x7f00000002c0)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x1e, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @private=0xa010100, {[@ssrr={0x89, 0x1f, 0x93, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x1d}, @local, @multicast2, @private=0xa010101, @rand_addr=0x64010102]}, @timestamp={0x44, 0x10, 0x54, 0x0, 0x4, [0xfa0, 0x3f, 0x80]}, @timestamp_prespec={0x44, 0xc, 0xb0, 0x3, 0x5, [{@remote, 0xf1fb}]}, @timestamp_prespec={0x44, 0x24, 0x9d, 0x3, 0x7, [{@remote, 0x8}, {@loopback, 0x856c}, {@local, 0xfffffffd}, {@remote, 0x8}]}, @ra={0x94, 0x4}]}}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0xce) 19:07:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xd5c10100}, 0x0) 19:07:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0a02810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:07:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x0}}}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2679.907975] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:07:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0xfeffffff00000000) 19:07:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x540c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:07:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xd6c10100}, 0x0) 19:07:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0c02810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:07:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:07:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b61, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:07:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xd7c10100}, 0x0) [ 2682.605345] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:07:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x540d, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) [ 2682.691792] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:07:03 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) accept$ax25(r0, 0x0, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be0000000010003d3de62e00000100000000000000080022eb000000002000000006000000e9ff00000000000008006558000000002f085201e3d609025f2b54cae4cb5a49247d607a028fc3973c00002e54046fb4b37a378428a2b5482748dffbdb9bede41a75b976e515d71c8a6d7afa7d13f5f603adb9b7f536c070"], 0x6c) 19:07:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xd8c10100}, 0x0) 19:07:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:07:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0e02810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2682.930843] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:07:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0xffffffff00000000) 19:07:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x540e, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:07:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xd9c10100}, 0x0) 19:07:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff1002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:07:06 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) accept$ax25(r0, 0x0, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be0000000010003d3de62e00000100000000000000080022eb000000002000000006000000e9ff00000000000008006558000000002f085201e3d609025f2b54cae4cb5a49247d607a028fc3973c00002e54046fb4b37a378428a2b5482748dffbdb9bede41a75b976e515d71c8a6d7afa7d13f5f603adb9b7f536c070"], 0x6c) 19:07:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:07:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xdac10100}, 0x0) [ 2685.686308] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:07:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x540f, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:07:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xdbc10100}, 0x0) 19:07:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) [ 2685.838307] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:07:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xdcc10100}, 0x0) 19:07:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff1202810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) [ 2686.048013] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2686.112326] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:07:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x1, 0x0, 0x0, 0x0, @time={0x401, 0x3}, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:07:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5410, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:07:09 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) accept$ax25(r0, 0x0, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be0000000010003d3de62e00000100000000000000080022eb000000002000000006000000e9ff00000000000008006558000000002f085201e3d609025f2b54cae4cb5a49247d607a028fc3973c00002e54046fb4b37a378428a2b5482748dffbdb9bede41a75b976e515d71c8a6d7afa7d13f5f603adb9b7f536c070"], 0x6c) 19:07:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xddc10100}, 0x0) 19:07:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:07:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff1802810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:07:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xdec10100}, 0x0) 19:07:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5412, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) [ 2688.749866] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:07:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xdfc10100}, 0x0) 19:07:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xe0c10100}, 0x0) 19:07:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5413, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:07:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xe4ffffff}, 0x0) [ 2688.949725] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 19:07:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5414, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 19:07:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}, 0x1, 0x0, 0xf0ffffff}, 0x0) 19:07:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff4802810600000f0012000b0001006d616373656300e10b00020005000700010000000a000540370000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7c"], 0x50}}, 0x0) 19:07:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x6}}}}}}}}, 0x200001ac) 19:07:12 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) accept$ax25(r0, 0x0, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="020000009f84bb57964baaaaaaaaaa0008004500005a0000000000299078ffffffffac1e00010420880b00000000000000000800000086dd080088be0000000010003d3de62e00000100000000000000080022eb000000002000000006000000e9ff00000000000008006558000000002f085201e3d609025f2b54cae4cb5a49247d607a028fc3973c00002e54046fb4b37a378428a2b5482748dffbdb9bede41a75b976e515d71c8a6d7afa7d13f5f603adb9b7f536c070"], 0x6c) 19:07:12 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x4) ioctl$TIOCCBRK(r0, 0x5428) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/12}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x800033) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) tkill(r1, 0x32) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a03"}}], 0x1c) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000140)={0x8, 0x2, 0x29}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 2691.775124] ------------[ cut here ]------------ [ 2691.775136] kernel BUG at arch/x86/mm/physaddr.c:27! [ 2691.775173] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 2691.775187] CPU: 0 PID: 9423 Comm: syz-executor.2 Not tainted 4.19.120-syzkaller #0 [ 2691.775195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2691.775217] RIP: 0010:__phys_addr+0xa7/0x110 [ 2691.775232] Code: 0c 7d 08 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 30 a9 37 00 48 85 db 75 0d e8 96 a7 37 00 4c 89 e0 5b 5d 41 5c c3 e8 89 a7 37 00 <0f> 0b e8 82 a7 37 00 48 c7 c0 10 50 c7 88 48 ba 00 00 00 00 00 fc [ 2691.775239] RSP: 0018:ffff88801fe579f8 EFLAGS: 00010016 [ 2691.775249] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc90009ed6000 [ 2691.775257] RDX: 0000000000001d07 RSI: ffffffff813021e7 RDI: 0000000000000007 [ 2691.775266] RBP: ffffc900946d6000 R08: ffff88804f074500 R09: ffffed1015cc4733 [ 2691.775274] R10: ffffed1015cc4732 R11: ffff8880ae623993 R12: 00004080146d6000 [ 2691.775282] R13: ffffffff83750b40 R14: 0000000000000302 R15: ffff88812c27f200 [ 2691.775292] FS: 00007f3ea0353700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 2691.775300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2691.775307] CR2: 0000000020000040 CR3: 0000000093749000 CR4: 00000000001426f0 [ 2691.775319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2691.775326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2691.775330] Call Trace: [ 2691.775349] ? vc_do_resize+0x10ac/0x1380 [ 2691.775362] kfree+0x77/0x220 [ 2691.775456] ? updatescrollmode.isra.0+0x850/0x850 [ 2691.775470] vc_do_resize+0x10ac/0x1380 [ 2691.775494] ? vt_console_print+0xf30/0xf30 [ 2691.775509] ? lock_acquire+0x170/0x400 [ 2691.775521] ? vt_resize+0x41/0xe0 [ 2691.775537] ? vc_resize+0x60/0x60 [ 2691.775550] vt_resize+0xa3/0xe0 [ 2691.775563] tty_ioctl+0xbdf/0x1420 [ 2691.775577] ? tty_vhangup+0x30/0x30 [ 2691.775591] ? mark_held_locks+0xf0/0xf0 [ 2691.775606] ? mark_held_locks+0xf0/0xf0 [ 2691.775619] ? find_held_lock+0x2d/0x110 [ 2691.775632] ? debug_check_no_obj_freed+0x20a/0x42e [ 2691.775648] ? tty_vhangup+0x30/0x30 [ 2691.775661] do_vfs_ioctl+0xcda/0x12e0 [ 2691.775674] ? selinux_file_ioctl+0x46c/0x5d0 [ 2691.775685] ? selinux_file_ioctl+0x125/0x5d0 [ 2691.775701] ? check_preemption_disabled+0x41/0x280 [ 2691.775712] ? ioctl_preallocate+0x200/0x200 [ 2691.775723] ? selinux_file_mprotect+0x600/0x600 [ 2691.775735] ? __fget+0x340/0x510 [ 2691.775748] ? iterate_fd+0x350/0x350 [ 2691.775765] ? security_file_ioctl+0x6c/0xb0 [ 2691.775778] ksys_ioctl+0x9b/0xc0 [ 2691.775791] __x64_sys_ioctl+0x6f/0xb0 [ 2691.775805] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2691.775825] do_syscall_64+0xf9/0x620 [ 2691.775842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2691.775852] RIP: 0033:0x45c829 [ 2691.775865] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2691.775872] RSP: 002b:00007f3ea0352c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2691.775883] RAX: ffffffffffffffda RBX: 00000000004ee880 RCX: 000000000045c829 [ 2691.775891] RDX: 0000000020000040 RSI: 0000000000005414 RDI: 0000000000000005 [ 2691.775898] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2691.775905] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2691.775912] R13: 0000000000000575 R14: 00000000004c8090 R15: 00007f3ea03536d4 [ 2691.775922] Modules linked in: [ 2691.775939] ---[ end trace 339b0c8d4030144c ]--- [ 2691.775952] RIP: 0010:__phys_addr+0xa7/0x110 [ 2691.775965] Code: 0c 7d 08 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 30 a9 37 00 48 85 db 75 0d e8 96 a7 37 00 4c 89 e0 5b 5d 41 5c c3 e8 89 a7 37 00 <0f> 0b e8 82 a7 37 00 48 c7 c0 10 50 c7 88 48 ba 00 00 00 00 00 fc [ 2691.775972] RSP: 0018:ffff88801fe579f8 EFLAGS: 00010016 [ 2691.775980] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc90009ed6000 [ 2691.775988] RDX: 0000000000001d07 RSI: ffffffff813021e7 RDI: 0000000000000007 [ 2691.775996] RBP: ffffc900946d6000 R08: ffff88804f074500 R09: ffffed1015cc4733 [ 2691.776004] R10: ffffed1015cc4732 R11: ffff8880ae623993 R12: 00004080146d6000 [ 2691.776012] R13: ffffffff83750b40 R14: 0000000000000302 R15: ffff88812c27f200 [ 2691.776022] FS: 00007f3ea0353700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 2691.776029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2691.776037] CR2: 0000000020000040 CR3: 0000000093749000 CR4: 00000000001426f0 [ 2691.776048] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2691.776056] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2691.776062] Kernel panic - not syncing: Fatal exception [ 2691.777360] Kernel Offset: disabled [ 2692.218935] Rebooting in 86400 seconds..