000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 385.196814][T18161] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 385.527485][T18166] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 12:40:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 385.625968][T18170] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:40:52 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 386.054550][T18174] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 12:40:52 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:52 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) [ 386.358252][T18177] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:40:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:53 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:53 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) [ 386.870914][T18187] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:40:53 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='cubic\x00', 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002000000000000000000000094b01a8c750e858d4898d8a6df25054120eb42816aee3564a6bb06d5d9363fa440b3befd38bb16522d76e872b3d44fdc4eed954fc0def4abcff198ede7cccc66f516511718cd13056ab627b30fc3cf22910e90aa9005736609ac12d6c9bbc40a50e890a4a49c613cfabe339bb6ac0900040000280cf2f3acce950abe1e24c8bb1c0b9f532ed709178add8902b96d5c705ee346392b8cdc87538a71ee644702b89cba5a86bf05727fddca2f40beca7655fa3bc82d038750f306b832de47b4f3c7aa11f6e45fd77f35097f444183e9980506be42ec2cd6"], 0x1c}}, 0x0) [ 387.037747][T18207] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:40:53 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:40:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 387.245072][T18219] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 387.650211][T18261] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:40:54 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002000000000000000000000094b01a"], 0x1c}}, 0x0) 12:40:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:54 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) [ 388.393482][T18297] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:40:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, 0x0, 0x0) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 388.889596][T18343] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:40:55 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, 0x0, 0x0) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:55 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:55 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:40:55 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='cubic\x00', 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002000000000000000000000094b01a8c750e858d4898d8a6df25054120eb42816aee3564a6bb06d5d9363fa440b3befd38bb16522d76e872b3d44fdc4eed954fc0def4abcff198ede7cccc66f516511718cd13056ab627b30fc3cf22910e90aa9005736609ac12d6c9bbc40a50e890a4a49c613cfabe339bb6ac0900040000280cf2f3acce950abe1e24c8bb1c0b9f532ed709178add8902b96d5c705ee346392b8cdc87538a71ee644702b89cba5a86bf05727fddca2f40beca7655fa3bc82d038750f306b832de47b4f3c7aa11f6e45fd77f35097f444183e9980506be42ec2cd6"], 0x1c}}, 0x0) [ 389.320081][T18346] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 389.493413][T18350] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 12:40:55 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, 0x0, 0x0) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:56 executing program 5: unshare(0x6c060000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:40:56 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) 12:40:56 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240), 0x0) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:56 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240), 0x0) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:56 executing program 2: unshare(0x6c060000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:40:57 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240), 0x0) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:57 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:40:57 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{0x0}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:57 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002000000000000000000000094b01a8c750e858d4898d8a6df25054120eb42816aee3564a6bb06d5d9363fa440b3befd38bb16522d76e872b3d44fdc4eed954fc0def4abcff198ede7cccc66f516511718cd13056ab627b30fc3cf22910e90aa9005736609ac12d6c9bbc40a50e890a4a49c613cfabe339bb6ac0900040000280cf2f3acce950abe1e24c8bb1c0b9f532ed709178add8902b96d5c705ee346392b8cdc87538a71ee644702b89cba5a86bf05727fddca2f40beca7655fa3bc82d038750f306b832de47b4f3c7aa11f6e45fd77f35097f444183e9980506be42ec2cd6"], 0x1c}}, 0x0) [ 391.335643][T18507] validate_nla: 4 callbacks suppressed [ 391.335663][T18507] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:40:57 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:40:57 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002000000000000000000000094b01a8c750e858d4898d8a6df25054120eb42816aee3564a6bb06d5d9363fa440b3befd38bb16522d76e872b3d44fdc4eed954fc0def4abcff198ede7cccc66f516511718cd13056ab627b30fc3cf22910e90aa9005736609ac12d6c9bbc40a50e890a4a49c613cfabe339bb6ac0900040000280cf2f3acce950abe1e24c8bb1c0b9f532ed709178add8902b96d5c705ee346392b8cdc87538a71ee644702b89cba5a86bf05727fddca2f40beca7655fa3bc82d038750f306b832de47b4f3c7aa11f6e45fd77f35097f444183e9980506be42ec2cd6"], 0x1c}}, 0x0) 12:40:57 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{0x0}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:58 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) [ 391.857611][T18529] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:40:58 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{0x0}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 392.275604][T18547] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:40:58 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:59 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) [ 392.903275][T18602] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:40:59 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 393.344879][T18621] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:40:59 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:40:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:40:59 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 393.736439][T18644] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 393.827822][T18649] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:00 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b27", 0x38}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:00 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:00 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) 12:41:00 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) [ 394.184816][T18656] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:00 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 394.314727][T18662] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 12:41:00 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 394.639556][T18669] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 12:41:01 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:01 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b27", 0x38}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:02 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b27", 0x38}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:02 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) (fail_nth: 1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:02 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) (fail_nth: 1) 12:41:02 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b27", 0x38}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 396.226657][T18734] FAULT_INJECTION: forcing a failure. [ 396.226657][T18734] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 396.347129][T18734] CPU: 1 PID: 18734 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 396.355934][T18734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.366441][T18734] Call Trace: [ 396.369720][T18734] [ 396.372647][T18734] dump_stack_lvl+0xcd/0x134 [ 396.377375][T18734] should_fail.cold+0x5/0xa [ 396.381882][T18734] _copy_from_user+0x2c/0x180 [ 396.386631][T18734] __copy_msghdr_from_user+0x91/0x4b0 [ 396.392090][T18734] ? __ia32_sys_shutdown+0x70/0x70 [ 396.397206][T18734] ? mark_lock+0xef/0x17b0 [ 396.401729][T18734] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 396.407734][T18734] sendmsg_copy_msghdr+0xa1/0x160 [ 396.412759][T18734] ? do_recvmmsg+0x6d0/0x6d0 [ 396.417359][T18734] ? lock_chain_count+0x20/0x20 [ 396.422213][T18734] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 396.428202][T18734] ___sys_sendmsg+0xc6/0x170 [ 396.432792][T18734] ? sendmsg_copy_msghdr+0x160/0x160 [ 396.438093][T18734] ? __fget_files+0x21b/0x3e0 [ 396.442854][T18734] ? lock_downgrade+0x6e0/0x6e0 [ 396.447719][T18734] ? __fget_files+0x23d/0x3e0 [ 396.452404][T18734] ? __fget_light+0xea/0x280 [ 396.457017][T18734] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 396.463359][T18734] __sys_sendmsg+0xe5/0x1b0 [ 396.467884][T18734] ? __sys_sendmsg_sock+0x30/0x30 [ 396.472933][T18734] ? syscall_enter_from_user_mode+0x21/0x70 [ 396.478938][T18734] do_syscall_64+0x35/0xb0 [ 396.483371][T18734] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 396.489305][T18734] RIP: 0033:0x7fcd2f7e5ae9 [ 396.493723][T18734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 396.513345][T18734] RSP: 002b:00007fcd2cd3a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.524825][T18734] RAX: ffffffffffffffda RBX: 00007fcd2f8f9020 RCX: 00007fcd2f7e5ae9 [ 396.532796][T18734] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000008 [ 396.540761][T18734] RBP: 00007fcd2cd3a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 396.548726][T18734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.556690][T18734] R13: 00007ffe14273b5f R14: 00007fcd2cd3a300 R15: 0000000000022000 [ 396.564680][T18734] [ 396.731526][T18758] validate_nla: 4 callbacks suppressed [ 396.731544][T18758] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) (fail_nth: 1) 12:41:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:03 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000000000000000"], 0x1c}}, 0x0) 12:41:03 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) (fail_nth: 1) [ 397.347342][T18764] FAULT_INJECTION: forcing a failure. [ 397.347342][T18764] name failslab, interval 1, probability 0, space 0, times 1 [ 397.390050][T18764] CPU: 1 PID: 18764 Comm: syz-executor.2 Not tainted 5.16.0-rc2-syzkaller #0 [ 397.398851][T18764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.408921][T18764] Call Trace: [ 397.412208][T18764] [ 397.415149][T18764] dump_stack_lvl+0xcd/0x134 [ 397.419772][T18764] should_fail.cold+0x5/0xa [ 397.424308][T18764] ? tomoyo_realpath_from_path+0xc3/0x620 [ 397.430149][T18764] should_failslab+0x5/0x10 [ 397.434727][T18764] __kmalloc+0x72/0x340 [ 397.438968][T18764] tomoyo_realpath_from_path+0xc3/0x620 [ 397.444547][T18764] ? tomoyo_profile+0x42/0x50 [ 397.449253][T18764] tomoyo_path_number_perm+0x1d5/0x590 [ 397.454735][T18764] ? tomoyo_path_number_perm+0x18d/0x590 [ 397.460397][T18764] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 397.466271][T18764] ? lock_downgrade+0x6e0/0x6e0 [ 397.471204][T18764] ? __fget_files+0x23d/0x3e0 [ 397.475914][T18764] security_file_ioctl+0x50/0xb0 [ 397.480942][T18764] __x64_sys_ioctl+0xb3/0x200 [ 397.485827][T18764] do_syscall_64+0x35/0xb0 [ 397.490277][T18764] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 397.496194][T18764] RIP: 0033:0x7fd2c8624ae9 [ 397.500637][T18764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 397.520265][T18764] RSP: 002b:00007fd2c5b9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.528966][T18764] RAX: ffffffffffffffda RBX: 00007fd2c8737f60 RCX: 00007fd2c8624ae9 12:41:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 397.536957][T18764] RDX: 0000000020000280 RSI: 0000000000008916 RDI: 0000000000000003 [ 397.544948][T18764] RBP: 00007fd2c5b9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 397.552932][T18764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.560927][T18764] R13: 00007ffe97a194bf R14: 00007fd2c5b9a300 R15: 0000000000022000 [ 397.568933][T18764] 12:41:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe367", 0x54}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 397.738525][T18731] FAULT_INJECTION: forcing a failure. [ 397.738525][T18731] name failslab, interval 1, probability 0, space 0, times 1 [ 397.778743][T18731] CPU: 1 PID: 18731 Comm: syz-executor.5 Not tainted 5.16.0-rc2-syzkaller #0 [ 397.787547][T18731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.797616][T18731] Call Trace: [ 397.800901][T18731] [ 397.803829][T18731] dump_stack_lvl+0xcd/0x134 [ 397.808549][T18731] should_fail.cold+0x5/0xa [ 397.813065][T18731] ? tomoyo_realpath_from_path+0xc3/0x620 [ 397.818789][T18731] should_failslab+0x5/0x10 [ 397.823296][T18731] __kmalloc+0x72/0x340 [ 397.827465][T18731] tomoyo_realpath_from_path+0xc3/0x620 [ 397.833019][T18731] ? tomoyo_profile+0x42/0x50 [ 397.837710][T18731] tomoyo_path_number_perm+0x1d5/0x590 [ 397.843170][T18731] ? tomoyo_path_number_perm+0x18d/0x590 [ 397.848813][T18731] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 397.854647][T18731] ? lock_downgrade+0x6e0/0x6e0 [ 397.860227][T18731] ? __fget_files+0x23d/0x3e0 [ 397.864912][T18731] security_file_ioctl+0x50/0xb0 [ 397.869856][T18731] __x64_sys_ioctl+0xb3/0x200 [ 397.874557][T18731] do_syscall_64+0x35/0xb0 [ 397.878994][T18731] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 397.884919][T18731] RIP: 0033:0x7fba77d61ae9 [ 397.889339][T18731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 397.908976][T18731] RSP: 002b:00007fba752d7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.917393][T18731] RAX: ffffffffffffffda RBX: 00007fba77e74f60 RCX: 00007fba77d61ae9 [ 397.925402][T18731] RDX: 0000000020000280 RSI: 0000000000008916 RDI: 0000000000000003 [ 397.933398][T18731] RBP: 00007fba752d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 397.941367][T18731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.949341][T18731] R13: 00007ffca2f957cf R14: 00007fba752d7300 R15: 0000000000022000 [ 397.957343][T18731] [ 398.091413][T18806] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 398.226472][T18764] ERROR: Out of memory at tomoyo_realpath_from_path. 12:41:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:05 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000000000000000"], 0x1c}}, 0x0) [ 398.793331][T18776] FAULT_INJECTION: forcing a failure. [ 398.793331][T18776] name failslab, interval 1, probability 0, space 0, times 0 [ 398.886598][T18776] CPU: 0 PID: 18776 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 398.895433][T18776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.905510][T18776] Call Trace: [ 398.908805][T18776] [ 398.911747][T18776] dump_stack_lvl+0xcd/0x134 [ 398.916379][T18776] should_fail.cold+0x5/0xa [ 398.920923][T18776] ? tomoyo_realpath_from_path+0xc3/0x620 [ 398.926676][T18776] should_failslab+0x5/0x10 [ 398.931380][T18776] __kmalloc+0x72/0x340 [ 398.935740][T18776] tomoyo_realpath_from_path+0xc3/0x620 [ 398.941312][T18776] ? tomoyo_profile+0x42/0x50 [ 398.946027][T18776] tomoyo_path_number_perm+0x1d5/0x590 [ 398.951513][T18776] ? tomoyo_path_number_perm+0x18d/0x590 [ 398.957177][T18776] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 398.963048][T18776] ? lock_downgrade+0x6e0/0x6e0 [ 398.967943][T18776] ? __fget_files+0x23d/0x3e0 [ 398.972652][T18776] security_file_ioctl+0x50/0xb0 [ 398.977694][T18776] __x64_sys_ioctl+0xb3/0x200 [ 398.982399][T18776] do_syscall_64+0x35/0xb0 [ 398.986839][T18776] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 398.992755][T18776] RIP: 0033:0x7fd167d20ae9 [ 398.997215][T18776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 399.017021][T18776] RSP: 002b:00007fd165296188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.025462][T18776] RAX: ffffffffffffffda RBX: 00007fd167e33f60 RCX: 00007fd167d20ae9 [ 399.033553][T18776] RDX: 0000000020000280 RSI: 0000000000008916 RDI: 0000000000000003 [ 399.041551][T18776] RBP: 00007fd1652961d0 R08: 0000000000000000 R09: 0000000000000000 [ 399.049684][T18776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.057670][T18776] R13: 00007ffdca11579f R14: 00007fd165296300 R15: 0000000000022000 [ 399.065680][T18776] [ 399.194135][T18776] ERROR: Out of memory at tomoyo_realpath_from_path. [ 399.229647][T18731] ERROR: Out of memory at tomoyo_realpath_from_path. 12:41:06 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x2, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:06 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe367", 0x54}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:06 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 399.909153][T18873] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x10, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x4c01, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:06 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000000000000000"], 0x1c}}, 0x0) 12:41:07 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x541b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:07 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe367", 0x54}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 401.040499][T18954] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:08 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x2, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:08 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:08 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x2, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:08 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fb", 0x62}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5450, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:08 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 402.130088][T18992] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5451, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:08 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002000010000000000000000000200000000000000"], 0x1c}}, 0x0) 12:41:09 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5452, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:09 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fb", 0x62}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 403.229385][T19074] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:09 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x10, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:09 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5460, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:10 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x10, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x6364, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:10 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:10 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fb", 0x62}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x6609, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 404.377911][T19125] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:11 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) 12:41:11 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8901, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:11 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:11 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x4c01, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8902, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:11 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596", 0x69}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 405.658879][T19193] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:12 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x4c01, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:12 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8903, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:12 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8904, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:13 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000"], 0x1c}}, 0x0) 12:41:13 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596", 0x69}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8906, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 407.041114][T19265] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:13 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:13 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x541b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8907, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:14 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:14 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x541b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:14 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596", 0x69}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:14 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xa00, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 408.483430][T19339] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890c, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:15 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000"], 0x1c}}, 0x0) 12:41:15 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xc00, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:15 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:15 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8a", 0x6d}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8912, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:15 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 409.607786][T19412] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:16 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:16 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8913, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:16 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8a", 0x6d}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 410.722508][T19471] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:17 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000"], 0x1c}}, 0x0) 12:41:17 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x5865, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:17 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5450, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:17 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8a", 0x6d}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 411.846793][T19543] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:18 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:18 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000"], 0x1c}}, 0x0) 12:41:23 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5450, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed", 0x6f}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x6558, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:23 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000"], 0x1c}}, 0x0) [ 417.091414][T19665] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x8100, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:24 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5451, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8919, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:24 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed", 0x6f}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:24 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:24 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000"], 0x1c}}, 0x0) [ 418.591495][T19735] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:25 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5451, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891a, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:25 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x34000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:25 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x400300, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:25 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed", 0x6f}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 419.756802][T19827] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:26 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:26 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5452, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8933, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:26 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:27 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000400)) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 420.991591][T19872] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:27 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000000000000000"], 0x1c}}, 0x0) 12:41:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8934, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:27 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5452, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:27 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8935, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:27 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:28 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000400)) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8940, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:28 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:28 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5460, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 422.099243][T19942] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8941, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:28 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:29 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000000000000000"], 0x1c}}, 0x0) 12:41:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x894c, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:29 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000400)) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:29 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:29 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5460, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8953, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 423.503980][T19995] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:30 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x9000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:30 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x6364, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8955, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:30 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xa000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8982, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:30 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, 0x0) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 424.593681][T20088] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:31 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000000000000000"], 0x1c}}, 0x0) 12:41:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8983, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:31 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xc000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:31 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, 0x0) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:32 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x6364, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a0, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:32 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8901, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 425.767142][T20107] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:32 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:32 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, 0x0) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 426.291957][T20168] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:32 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xf000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xf501, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:33 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x10000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:33 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000000000000000"], 0x1c}}, 0x0) 12:41:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400448c9, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:33 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 427.388792][T20212] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:34 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x6628, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:34 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400448dd, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:34 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8902, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400454ca, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:34 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 428.381293][T20257] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:34 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x627bf0a5, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40049409, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40086602, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:35 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:35 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40186366, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 429.519937][T20335] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 429.559839][T20337] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:38 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8901, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x401c5820, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:38 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8903, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:38 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:38 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x6364, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 432.744400][T20389] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x4020940d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5000943a, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:39 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x88a8ffff, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80086301, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 433.813717][T20479] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:40 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8902, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:40 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80086601, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:40 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8904, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:41 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8901, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:41 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108906, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:41 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xa5f07b62, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 435.043361][T20532] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108907, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:41 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:42 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x801c581f, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 436.209520][T20595] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:42 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8903, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:42 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xffffa888, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0045878, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:42 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8906, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:43 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8902, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0045878, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:43 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:43 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 437.378799][T20657] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0189436, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:44 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc020660b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:44 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8904, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc028660f, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:44 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:44 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8907, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:45 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 438.691403][T20723] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:45 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8902, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000080)}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:45 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:45 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000003b80)={0xb, 0x9, 0x10000, 0x3, 0xa81, 0xffffffffffffffff, 0x73dcca65, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0xfffffffb}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth0_to_team\x00', {0x2, 0x0, @broadcast}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x800, 0x0}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x0, 0x588, 0xffffffff, 0x250, 0x480, 0x680, 0x680, 0xffffffff, 0x680, 0x680, 0x5, &(0x7f0000000340), {[{{@uncond, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x9, 0xaf2, 'bm\x00', "33bdc0cfdf433b75c12d9717900becf9b2aabda67dcaf940c70104d00bb057c3c8150339128274c30e443c9589e2ecc85e31559e952a6ae6ec4419cf0921ffa86e9e45ab081e46d12303aff498c349aa97c48b741e919d501e97caebbeebdc697031100b3f2547d7b2bec17548fe885f235cf062f3c7b5ff4637db80a172608a", 0x15, 0x1, {0x1}}}, @common=@unspec=@string={{0xc0}, {0x7ff, 0x0, 'bm\x00', "7f825e6ee8980ffde3a912c7f18ca552c486b5fe44df273897d475ec771e784e6525b43d6fad29933ac3637cf313caaead4605fc626145827e328a0b3294eba841ebcd4682bc15298ffb4e3d00b7b0a567a30e7520d4ca409693fc1fd23144eade07ceb454343090da7c855945166f7ef4d3060640f3ab68423f4f0af67ee1ed", 0x7f, 0x2, {0x80000000}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0x0, 0xffffffff, 0xff], 0x4e24, 0x4e23, 0x4e20, 0x4e21, 0x10000, 0x9, 0x1, 0x7, 0x200}}}, {{@ip={@local, @multicast2, 0xff, 0x0, 'veth1_to_team\x00', 'veth1_macvtap\x00', {0xff}, {}, 0x84, 0x0, 0xc}, 0x0, 0x1f8, 0x230, 0x0, {}, [@common=@ah={{0x30}, {[0x1ff, 0xff]}}, @common=@inet=@hashlimit3={{0x158}, {'gretap0\x00', {0x8001, 0x8, 0x1b, 0x10001, 0x3, 0x10001, 0x9, 0x6, 0x80, 0x18}, {0x8}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xf, @rand_addr=0x64010101, @multicast2, @port=0x4e23, @port=0x4e22}}}}, {{@ip={@loopback, @empty, 0xff, 0xffffff00, 'ip6tnl0\x00', 'ip6gre0\x00', {}, {}, 0x1, 0x3, 0x2}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'netpci0\x00', {0x6}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "8576", 0x1}}, @common=@ttl={{0x28}, {0x0, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @broadcast, @multicast2, @gre_key=0x8, @gre_key=0x400}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x778) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r4) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x100, 0xd8, &(0x7f00000000c0)=""/216, 0x41000, 0x9, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xc, 0x0, 0x1ff}, 0x10, r2}, 0x78) r6 = socket$key(0xf, 0x3, 0x2) r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) recvmmsg(r7, &(0x7f0000005880)=[{{&(0x7f0000000c80)=@can, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d00)=""/109, 0x6d}, {&(0x7f0000000d80)=""/160, 0xa0}, {&(0x7f0000000e40)=""/237, 0xed}, {&(0x7f0000000f40)=""/128, 0x80}, {&(0x7f0000000fc0)=""/108, 0x6c}], 0x5, &(0x7f00000010c0)=""/104, 0x68}, 0xaa7}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001140)=""/49, 0x31}], 0x1, &(0x7f00000011c0)=""/192, 0xc0}, 0x1011}, {{&(0x7f0000001280)=@can, 0x80, &(0x7f0000003800)=[{&(0x7f0000001300)=""/137, 0x89}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/206, 0xce}, {&(0x7f00000034c0)=""/234, 0xea}, {&(0x7f00000035c0)=""/239, 0xef}, {&(0x7f00000036c0)=""/22, 0x16}, {&(0x7f0000003700)=""/91, 0x5b}, {&(0x7f0000003780)=""/109, 0x6d}], 0x9, &(0x7f00000038c0)=""/191, 0xbf}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003980)=""/57, 0x39}], 0x1, &(0x7f0000003a00)=""/237, 0xed}, 0xfffffffe}, {{&(0x7f0000003b00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003b80)}], 0x1, &(0x7f0000003c00)=""/190, 0xbe}, 0x8}, {{&(0x7f0000003cc0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000004200)=[{&(0x7f0000003d40)=""/201, 0xc9}, {&(0x7f0000003e40)=""/159, 0x9f}, {&(0x7f0000003f00)=""/22, 0x16}, {&(0x7f0000003f40)=""/233, 0xe9}, {&(0x7f0000004040)=""/10, 0xa}, {&(0x7f0000004080)=""/252, 0xfc}, {&(0x7f0000004180)=""/92, 0x5c}], 0x7, &(0x7f0000004280)=""/57, 0x39}, 0x401}, {{&(0x7f00000042c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000005700)=[{&(0x7f0000004340)=""/25, 0x19}, {&(0x7f0000004380)=""/228, 0xe4}, {&(0x7f0000004480)=""/199, 0xc7}, {&(0x7f0000004580)=""/199, 0xc7}, {&(0x7f0000004680)=""/127, 0x7f}, {&(0x7f0000004700)=""/4096, 0x1000}], 0x6, &(0x7f0000005780)=""/227, 0xe3}, 0x3}], 0x7, 0x2000, &(0x7f0000005a40)) sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c40)={r5, &(0x7f0000000b80)="74e71ee77f14987ed2b5cedf03883b687ac47b646ceb14cb934117f96b4b74c2cd6ef6c234baf034c99e8c19bd5b3c27e95b17473d63e3d4bd4567ebd18334293256948b73461fd07bee0b30e6faea9f0d1f8053b96d270f06d296dcabd7a5a4d281686310640e3bc7d8863d41ec73068190158ae5d530311cc0831845360c47f181181af21b86b7fae0d8a16144505c4460321d446b499322b78d3d"}, 0x20) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x9, 0x4) 12:41:46 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 439.728053][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.734426][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.864619][T20803] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:46 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:46 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8906, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)='devices.allow\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r2, 0xa1a53000) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1a, 0x2, 0x2656, 0x4, 0x38, r0, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x601a1316}, [@jmp={0x5, 0x1, 0x9, 0x2, 0x3, 0x20, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map={0x18, 0xb, 0x1, 0x0, r3}, @ldst={0x1, 0x0, 0x6, 0x6, 0x6, 0xfffffffffffffff8, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000380)='GPL\x00', 0x4, 0xb3, &(0x7f00000003c0)=""/179, 0x41100, 0x11, '\x00', 0x0, 0x14, r4, 0x8, &(0x7f00000004c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x8, 0x6, 0x20}, 0x10}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xe, 0x852, 0x8, 0x3, 0x0, r0, 0x8ab, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f0000000000), 0x248800) recvmsg(r5, &(0x7f0000000200)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/254, 0xfe}], 0x1}, 0x0) 12:41:46 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0xf, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:46 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x4, 0xfff}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1c, 0x3, 0x401, 0x1000, 0x500, r0, 0x60, '\x00', 0x0, r1, 0x2, 0x5, 0x3}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000002c0)=""/4096, &(0x7f00000000c0)=0x1000) r3 = socket$inet(0x2, 0xa, 0x7fffffff) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000100)={'geneve1\x00', 0xcb47}) 12:41:47 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:47 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x10, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 441.074475][T20874] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:47 executing program 2: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000680)=ANY=[@ANYRES32=0x0]) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="0bc5625b261a8a4033ad744c16d430680041ef9343af3b96a82782a95502568be2427916adf09ea271e96c2de387040dda50fdbc457568bea9f7d9df192c6e29eb22a3945ee5f208ce7ee7798893912a6e858e4bfd9d266c622a89e554c965ea6a1521055aeae75e224b15a1e1b58e641770e3c0e77d9d4cf3decae86c6e27f03c4e95c72aaf220a5ced3300575508", &(0x7f00000000c0)=""/224, &(0x7f00000001c0)="0333d051e6cd9209912403d7cd6a2443d8553506100b8da481dbca33714773cf975c0cbc5830107d49f10fad8316d077d8296e3833bb09427a29aa4f98ee843056179b3fbb3c14e08b37195603a3276c852b1d14eb5258", &(0x7f00000002c0)="bfc80a0a565d421edbcf4100335e52f9eade94131f8a385506a910f5de72fbc699cab852f98060f815af0fee7c4975f484678ba91671b2bf37420bd2380abbf06fb42d098dc05f37a8d1f435c159152524d6348ed81c58e12db61db21cea93e26d3aba33af4b2fde15dec5bb69eafa3ca71cc711aeeee8fe90f9d421a2a02942e07982af959ce6d02c81108cfb8160b33c156fc696ae0459b38a8b115428e68be522e2a20f2ee3f2187ae5a5a4bd1b11c6cb70f9823e1aefadd2dad60618703f3dc90a350c4a6afce45ca09f860bcc35716f", 0x8, r0, 0x4}, 0x38) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000540)=""/246, &(0x7f0000000640)=0xf6) [ 441.269681][T20878] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 441.312821][T20884] IPVS: length: 246 != 8 12:41:47 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0xc0, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r0, 0xffffffffffffff34, 0x6, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_delvlan={0x30, 0x71, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 12:41:48 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890c, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:48 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0xec0, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:48 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:48 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8907, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:48 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8906, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 442.406488][T20908] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000080)=""/121, 0x79}, {&(0x7f0000000100)=""/128, 0x80}, {&(0x7f0000000180)=""/99, 0x63}, {&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/55, 0x37}, {&(0x7f00000012c0)=""/82, 0x52}], 0x7, &(0x7f00000013c0)=""/116, 0x74}, 0x10101) connect$inet(r1, &(0x7f0000001480)={0x2, 0x4e21, @empty}, 0x10) 12:41:48 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x33fe0, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:49 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x412, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x40) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:49 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:49 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20000760, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 443.505067][T20994] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:50 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:50 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x7ffff000, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:50 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000014c0)={0xff, 0x10, '\x00', 0x1, &(0x7f0000001480)=[0x0, 0x0]}) sendmmsg(r2, &(0x7f0000005680)=[{{&(0x7f0000001500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x2, 0x4, 0x1, 0x3}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001580)="3ad031130dbb3dabf4c162556e45df1da2de1a2a32baec9936f0a6eab7f668b5df741ad3450adeda5866e281c6bbd38faa1b856e76335bf0af9e54a21718ce859955e603adaf42fd86f546895e15c2c995e6dc7ea58554b9d004d9e92ca79f90868a82a186f7f863384459170069f18cb65a5a38e87c6f61980f96c3f7a1cfd88d1cb28a1a7d0331de44394507987433f475caf5c139ac513ff2a4a0dc6fdd75710b98c61cfed3ba27f6a3c6420158bbf73d74b8b0189d01487cfd9d2bf54d837b3f6ea52f83a78eef4f818a566b6fe95d0ad81214df78a4c27fe7", 0xdb}, {&(0x7f0000001680)="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", 0xff}, {&(0x7f0000001780)="fa632f5ca7d47cc2583f165e1bb0410de7705ae334705209546d6aadaf5731fd9d005a26e1016ee37dc2230822ec66690f9ad6f99fb9652033f6194f64b19dc0acca0db2a7e0cf14445ef206a41d89f2e2f02beb74e9765c85798fe29228e31a96a09556a025367246c4c0161d170c8d43ef6f3a754ff51e6ac2eadf7987680638d5fc08b4c6dee0c195242f4fda202bd909ffc6b6b5799f0c16f59041e1c274361aa4f80cf6c5926e162efdca604e3274a780ffadca570ff9e5c5cd814b72ae", 0xc0}, {&(0x7f0000001840)="3af9ee7a4698d9fffaf9c36b99407ffe1e635001cf1fc835c395b5dd0b6c9989a86ea71bad51e0154e5a11b6479fb1c0658229bc4ce051681464a5e6fb66741da441dc77", 0x44}, {&(0x7f00000018c0)="d80104371a7035c458f0965325bcb5fde0f3cdf926b219803676e1082b7afff833adae0813", 0x25}, {&(0x7f0000001900)="b80a3f7f02b6607b604ffe706fe2a97d40", 0x11}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="4b2462d922c952917770fd56fdc7ca5ea8c06d4f30b47ddc327955f8d99b15fd6cf5092d3d5424ae8d4c8dded1f544b2a0029f6756ec0c1179dc588b9d79169e23", 0x41}, {&(0x7f00000029c0)="4b1a7d98e1f8f5542849c7fa1a921b0ace7802608d77eb4f522b5d4a8c048ffaa427833cf162c7ead0fa3445674696b8b792690c0a337a14da82a4cf8d118aa2ee45d1c2e49cd4af8c9bc268d57b089bea0470d238427b9fa6adf104b081d5d8a572e36049ac596fd97918cf4aae86549e3202764e01556a864f808524ecba59cf944b46d1501a03de3f4b8641d45afee4f0f02cc4508f7a36f002c99afdc11f4d255e5025571f4c4a60a9329ecb52c5cfbfe5e96c95917e473f293d2e4f7efc8e12300e4641684d010ea4cab8fbfa062d", 0xd1}, {&(0x7f0000002ac0)="9b05be01dab1b2588ce9ec1c734c582dd29080a866922683b745dc0bd4", 0x1d}], 0xa, &(0x7f0000002bc0)=ANY=[@ANYBLOB="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"/1072], 0x430}}, {{&(0x7f0000003000)=@caif=@dgm={0x25, 0x7, 0x2}, 0x80, &(0x7f0000003140)=[{&(0x7f0000003080)="fbbba758f2a14ec8d11874e97c27e901ab6cacf678a3c928f86a25ec2311a69caa2f18a921e14f5428a59c7d14589f580cbf7a953a2f15019c3ba0eb539355a74d89dd97c704b35553683697d2e26180e96ceee5be0952d6f0099943411bae97fa91016ecb766c865b04fc847fa4d7e8800cc0732aef824003f9659f7c92fa7a059177be57d120f79695", 0x8a}], 0x1, &(0x7f0000003180)=[{0x1010, 0x10c, 0x800, "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"}], 0x1010}}, {{&(0x7f00000041c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000005600)=[{&(0x7f0000004240)="6143935f1b38665906ec41c3bec94ff822a5", 0x12}, {&(0x7f0000004280)="d039c56d2b591de706705dfbe966d71d54b2cd207635a902b19ea639740a08a91d29b548b5def643a7a1400d79ca73d77ff8413487e991e76bdb232a75d79a51e428001ec04c48b6801bb4364f3f04cb273482a43d3f3a418d9c", 0x5a}, {&(0x7f0000004300)="b2682fd269b22ef525ba2a1a1d559b327c139b3a5f0bdf3b34e5fa78f3f11a0e80fcb39343e14bbbc8346e761bcee906558459573564eb5683e9367706c2f910f47e60eb5b2f00a228c9640d5f740c6e0ff4", 0x52}, {&(0x7f0000004380)="6471e4dadac180b55478b10c94924a5a0914345ac2922e061a17d2f4554a438063eec3bbcc35117caaf91511d230c6b5a82549574faa455964242d33bf625f3eb7173c21c6cba2849a0c621060b9bad0627beac6b69ddb06815270985b16becb4e2be945b75c0bdc7f01994699c512646d7d0261d4af4fed76c8679bc903495c3ea46b29b5cd1e572d38494d59b7cea7ab4560494fc98a74fd951ac003064dc25cdd9e7e2141e64b68ce6a4811a9e38c5bda45b38c7377b17717ea87c66bf99947cceee8bd2c4e5433292b5bf41e9c3b966968de97399df3415679b2796948f3b1c029bc01b23e8693114add53f835c09458a362c99402deaedcb0dced05b6752bc3ab1c10fa2c0b0888d1da59e074df89609dad467bc4c51ab6a4d94292f10042e36577a556f1a40123ea9b17d2f1817eba0136a40087cd760244a1f96bfe5adc97756c61e6309d3d3d990641b49a6cc87f8ba1efe2138e63eebc604a8dd8d1184cbc98f662d8e242a28c340471ec2681ee3e75d25921ea8b638dcd451470dee988a7da9861665878edfd6b3ea44984c65ee347acb69c30b971cca868911d28ad9886240819198297a262971bd440122f8837bb6527b1444751344166655bb1acd10feeb53e111eebeb21f230e394aee2fcaae42c64cd8f62acf39e327316dd701e53f9c60214c11eb72e13035d914912720d727281cdf2bde3514fa97b2cb865d297dea3563193a2008f190bc06f68a421e866472a1882a73b05e475943f80bec49582a7bf6fb6df2837a08cd5d6d34cfdab99e51b71bf8d08786ff56f08566cd43dea6d1c064ac786f7c302e4c72e5b7ec03ed16e45a4aaab4c8e95c46dffddad5a65626f97680614fa51f394e7e2e54ca67f2b2469f3fa1497e27f48f1501445aa0babe3d5cce3a17560fe0bc9190333dff784ddbbca7da621bdcd9ee3019c027fa9124f3a363d1c822c6222627fa4975e3cc1e31f9ad5083bbdaeda9f8f3d19ceef1771043145e097cd0778cac92faf32e49d042b87e65387ebf57a40d2534d265fb14abbfbc7abfa4c56011bc223d068a2c3507711563977311a5120ee26b0f02eb359cd35c1282c62f98d078792aa8523511b07a8aa8d8855840459b6349209a692957f4babd296f90312d0d6e927a22cbb45b3b00c59dbb109d4c9879476b9ac4b23a205d1d8e6cc672b2f9cae1037077f70fbb5267762e5c8b95af2f2069bd039fd7a4e2d7c86a56e0aa3f6607a5aa1e12735b11eaaee3de4e4952ac54bc34cd51cc96a17e4b0aeb470c9700b167c4f0c32b04bcf27426ecbfd66a5b079a041ddb47bf80816ac6371680aab8027a36f8c25dd9d24f97cccb93af47acc6030559f9ac6613d623c3f2f9a00217d7c8ea048395b8f94d3aedde27857b451d689cb45045da375e4bec68f3ffe06313694d2164e7b756d945363de7329c85aaaf570bcdcd30eb4b8d192065b6350765e6b5656649e1487f56992c7543eb458a2983b626339f294cc7fb93918b33cb3de76350a5f25e2f89f71c96d19ef40f53c21692fd006d1673a6ddf0f9b1ddbfaa1e82c2e181660e822288f4793e3956e45eedb5db0039db6b5906ea53821ff14db6ce2fb518021893261fb3aae8b62bbf5fd026050dd15da564b7a13bbb7e22870e4a96847dc57739053a51ebcc636454900e96b137c77d2c7ea4553922bc12471b771b0235926a454a54227de67e858db8d05df248ee4b21f4b6f61a11cdac772df5b7a088ec076d444bb8721eb146728883a841e063f300933ace9ab915be731cd0da901cfda4a96a18c6472409b08b1e0a7225185b891efc0b68641f3ce60b8e7b654dc77a916ef767f6ca6eaa169444d83c75a96e3f41ec3710b911d6d638b8636408dea20451bb7753379eb0689d93e287fc65bed8ef2ecc7ca88db13115ddfe4b9a7e25c0bdf6c87302f89448bead09c85fb4ed7881484211c4f1b763ff4693ff66559ae2b3e0b1472ffef56911d81fe787b9d2cf3202b640d0a8475895d22b8481300ea6eb507544edc424b59e11d2fcd0a4cad2f595cbad14d5874467c50805966c8a3ef35acb3feae851dc7bf42f16e2a7186a22bfa134dcbd5c762b37c6e2d14d6ac8fa05d3053f6cce1258bbfb5774373a5a52683f82b5191f62ae377946c3469d5667378ffa94f5142d48772abc224fad7f1f7f912f46e1dc1c2ab206dcdffefaab20ebc7af07abbbf2e900e86511b3eb40b532fa61a6dc7681df8e596bd23ea2ab7a3fca5e962466f44ed56cc3a9d31600404e147b4327f1c3c1eac5577fa3bc881e255cb3bf45135bd06ce9cc08db69715dc7273e3948000a3f7402601230fd5cdf2a64c765b037418d82fcca33057ed7aaaf8442d263ba33408538b5e9d5e95cb64e9997dfd4a79b2aac651894ee56824db9516ef6cb83ded420e4b48e46b35cf58e9a44eb4e3c7ba3458ad315d047e587fa352ec20ad99f834a23e42ef4cfab9032734c2d92d90bd5fb6ddbf0a29b003da1b70eb0bd9f452093427fc549ae635f8cca1b4f287d73f2bcce3a7e9ac3c9c51b9cc92d51075b38cf822ce1b4b9f2c963a21f15c56769c50b100915be4a2cafd7d1d1c0c5583320eeb888fdfdbb588500fb7c705812e90a53269b4c3631a34eb4fe5517bbd2da011faffcd0a787bf6a69045b9f5cd87cd1dc5cfa6fcb2cdb84198dc0c2ec2b1eea5bd23793737cd878c5cdf19cd35e945f17a0881970704f49063b1de94c867ff9f0f70598e519d09321f2cbd192cc57d7331d251b98aec88b82cb32159115bd7928e80f96babf1479163c54679b04427bdde934797bcf349547a06f36a2b23bc24744f128a0b2fbd64941651db763fb779331abadf1b3f1be568353e464eb7eedf18fef1bff497660b2f694d2e5632d66f3902314801ca4092b39def0d67ce548fab264a6f8c9b714905b77b18f2d835f67d674d3fa2eeca26aa87ecc724b92a19bfde1467087343272dd114e8ee7a0ef1c363cb028580dc0b483a0859fbac11083a9f9e1e98ca8eadeaf934a2bd91b513bdbd24c8e16973f0b985b4d7b79033ee8a92cf95a664db74bc8856c7eef042fc2b0e3eb8ec4220b632764ce03653e22a87382c6bc2bea8f0364d1424030c55566b4a0e8bee56a1eb79d45e3d3569e32ac8a8cd8d820ccede8367a7728fce62a52f4f0eaf03c0ceba04465ac679543b68e3dfb7576d89e5f0a0f061f7de43fbecf017806a7886dab5a8c23c8d7eab480a0591b81875e7a4047ee53289c00161b531a14cd7281973fc221ed5056b4374e4ba82e69c7dd1222a360152d2d52203ac3ddd844feee51b159bf1d829b1eb0cd734bf57993a5bf2f15b6c601958e119e0f77ee93e180b4e5e9718ddeddc40844218bfb765e9bb79a8adfd2d90303bd8deece1884a5a351b477a7dcf4518711eae368bd870670d00ad11aae10b4e54e0e5ee1ceeb33771625992d895ab4b21ff2e84baed1a6d75922f6efa7cce0fc7f914943cfb8f86f6aaf7d587c8d151a41e4f5639548607e4fc323133ca2cc50386a9f96fa4805a3a4e66ba8f9569247d731fc9a887457c8a4d2a991d148fb0be45b6706576be5c611a49a27e84295fdee30b5c4aa5d10882b9fae166db6853fb1e79dd564b4304fe9fd0b7a03f43e49893f0362a0df8c86fabd6c168978649920152770219a290c7259c302a6b7df5914678fb4f68907fab49b02bedcd4e68696540f2ee9f72d955415a2699b2afd046c031dfe83eded67f167dc7e4463420b3afbd444a08b930294d2c469c0b945e85ca8405375114e6cc7f21fff595c21e4d679b1683ca7b5e3134aa34fe7205c5786da0c40383f6277b98902ba6c083265912c29250bd739a4981db6a7753787a21d033b3325a945914a494f10a2a866307b7db0d7a0136f07ad5b5b8e60a81bdf8f2113cc8054be536af0aee1157845a667a9f2d076073889d4180a1e5fe4ae292e9cdee9dd0387d04525096b6a28836b4354e556ad59327aa6d33ce40a311d13626e721aae4ce4fd2dc23385f12ce12473ec23f44d911b9962aaf1c1c2f11db85fae4322e59862c76b7c68d92224ac1f17d378f7bbae0175961f272687a4bf9b1736ad1aa0614597e59bf40592373b032fcf1d32bbf66f8497b389b9deab17894976a402be7868a5353842e986ee0b662310761898640f902e11a13d71f47ad2a249c5b6d1d05d751238f169518cae7de59651ead419c0175d930a908949dc4aa9c2b8249b6a62e14f22ed9970884b353ffbc153b7db5ca755c1e12c04f42f781b5ed66e5eb6943f027e66099f158d59ddee02d2a7c3dbc478f41e284bda2a55a95ff5a1b21cee81bcdb07a1eb40d12dca67e09ea2d572f27fb28d85f87f42c54048b88a9f1dc7824dd9f66996d691558e01f56c62b3e089d3897b2cdc9374c8666076bc68a569b06c1c3cd30abdfd0203b6b49a9edb5e846bf594412bb8229a4fcd981354dc363d05443584ed1cd47182a50c11ded0a13f94f11607f9d070c4423321ce12487d6a31f3da13324344479e70f6c59cd784db0f084af9a166372fdda2d57c91a06eb43b30d07e02687b0136b168bfadff65a18ab4929c945e911a710384d5c8c181b18f2a015ef3cb4507368e0768b03e6cf7c4038cae42c67097dd705f36750638149975b14a7826d8f5f1ccc713161499b789b5ce4d29fb6d1433da2e4b020a3b855d8bae7a308e3fcb81d274f178ebc1769f73727cd962e2fe20f5ab0647e866bd3bced3202e5ebfbe32f11068adfe2574dda9585701a2a6107691ce85b121074b7a727a80a52249ec625930ecc3a12f4dd8663a9cb7b8e71baed2a091ae26ab93b975610e79af2375ef3514457c9756dd1032383fc5fa3046eff4cfba5eb3cdcef1c8770734daf4e4a076277f6f2dd1e00533c59d045ffb93f5d1a3ec5e0faee04767d16d2e4d755ef346aa912aa31604d352575822c2039237d3cc1910f3975b3d8eba34c3df51b0d99e3640cc2846196518e3effa1b449e7dda80c5e118e3923006ed138c4e3c93b85388f7aa74a666263aa3333ee3098b4fc78398e36389bbe07b1f1fc9d86952ba85c50264c2219918581c37c40cc8d98e49f7006bebdd00a97d0cf2f524a822f9f25962d1948fcc8f2ceae8244dd6cb1d196f7f1f323d37e343a2e77c9efc840e896476498cf5804f98aab65adf77e33c580ae309a222ec18d00825dd98e6a1838f61436711291b5636fb597dcc6463ce97bfb3534429a4a706abcf16575fbe58d561226e4f4d91587cf553aaa9936b5517229014d8de3e0c3206d05af151ff4aba7c42b7ac940ad5ebb8fd2550e7b51c9b69ff7d50d02b4908d74474f733863743f5aae9c2232c4c5386b4054493a3e40b6c58894982781d3f2c26233e62d31f64a02dad65e3e29a7b008e79c37e0a369dc01a980938d19706b8a59bb9f4303cb8773198591514608317a36e5af2ea563f5b8dc3e683b0c329a710030913ff5795a2a74ec8e39114261b4fc965cc75934928ce6919a919324067531f0d33d897d42c8583b8e9c6eda190dce2e9b3306e2cc476708502430bfe02db349a9b09b5a15983dedb28b25f9b4ce188c08707a73e85a92bddde64da296729b82d8aa764def05db188b9074e0f6dbd61bc77c650176b2253759ac813c30d9a75e48605c48603f6314416b6a436cece89321cf0d1fb4c2a6953404d8046ea32ac48c6c6ea20e0e696c43df05d7148ad3eb54e138af70e545eb79124e4b35abb8f0a39341a1b7acb765b2987bbd2dc30762ec258b4c340fe3d4c463b5a7bd83edbef12715", 0x1000}, {&(0x7f0000005380)="abdae0e0c23fe6edb67af4c2c1408c188252fa442932ab7db72c01bcc888c8027a609ffe8c9b709a13b47a781d9e85b93b0226b13a80139a79df5f974d91c30d3331f8fdf53d5739646189883901b7d0ff91d64da31fcc16ab55c3c6db6232f2938a22e1a9b2825d6e7fd641943bcb1b56fabebc23f5c8e421620e380f9f091674dbb9a5d81c5119b679ef897b0c45e1f8ffeb09c4ae0f6da4c6e30765fb49db4af4905da50be896869fdc7c26dcf790da864202f86bc5cac677fe3a070433eb33b827e96847b9067ff00ac856e99e4342ac078e4f709305f048e6396f8fc296ca3ac58e9a1da07056522658e4b4cb", 0xef}, {&(0x7f0000005480)="49935c9c2a32731d82e1d03310608aac1472c2713790d8fb3942f0ccad0ac4b9dc957150b32d3c2ab25737009b3bb5a584be0a629decd1016640fd7e4d5196138820d27f5d", 0x45}, {&(0x7f0000005500)="e2ab6f67a05f8f9a415059ea89fa37b0c003002a936c8ec7be116e60c8b1f503a48d53c074d05590e21c55d49a03fc5a83682ad11a0f30fcc52e144423828dffbfccbaef653f08e434cfff85a9c57a7d2a676ca22bf0a80f6c4dcadf9182098ab77807bed59d1c879b59e4debcdd9b40fae9ea3143b1e39b18c11d86399cdf304f77d63b74357e8c1267fbac3ade56cfe778adf05ec6a8119f758cfeb95589589b801646ef795ccd3c7b6e464b6a20b8c54c3be541e7ce23e646cbcaf747ce9eb282a144f32fcc3ab0b3d6c88913c594ec8f0185f5b6f5beb1ed76311561546468a8e5feda17770798e26c85da8718900ceb07a7e6e1262eb8", 0xf9}], 0x7}}], 0x3, 0x4004001) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000005900)={&(0x7f0000005800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000058c0)={&(0x7f0000005840)={0x7c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x57b}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xffff8f39}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x67}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xa7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000050}, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'macvlan1\x00', {0x2, 0x0, @broadcast}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x48006) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001440)={r3, &(0x7f0000001380)="d4d4a4843506f07f6983f869fa18629bfcf9c1bd6a2575b3981e4fa51385843cbe3547cbc371a47238263fad1f4a3ae4c8b63ad4718fe0ec226f4a28807565420fcf73f2b675be1f67955b2e1f367ee2eb2e8ba6d2b9f5741b91b36f97226241a0619757aaba9b6be56f8b03140786c56e9d0da44875711504a17617dde89a7639ccd6574e59e790ec9b903e9101aa9c33b95da0c539e277fb3e17495533167aef5ca3aaea38900f511105258394bf9d49b47d9776e21a41d8"}, 0x20) accept(r3, &(0x7f0000005740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000057c0)=0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000080)=""/140, 0x8c}, {&(0x7f0000000180)=""/153, 0x99}, {&(0x7f00000002c0)=""/156, 0x9c}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4, 0xffffffc0, 0x1c8600) 12:41:50 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:50 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 444.655199][T21017] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:51 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x80000, 0x100) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:51 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0xfffffdef, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:51 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10) 12:41:51 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:51 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0xf, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:52 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) getpeername(r1, &(0x7f00000001c0)=@nl=@unspec, &(0x7f0000000100)=0x80) recvmsg(r2, &(0x7f0000000740)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f0000000540)=""/169, 0xa9}, {&(0x7f0000000600)=""/161, 0xa1}], 0x6, &(0x7f00000007c0)=""/180, 0xb4}, 0x40000160) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x8, 0x0, 0x8, 0x24, r0, 0x100, '\x00', r3, 0xffffffffffffffff, 0x1}, 0x40) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 445.810650][T21110] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:53 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8912, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:53 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x77, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:53 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:53 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890c, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000080)=0x6, 0x4) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000040)="2580ebad91d1f4adf3293576b6cf607645", &(0x7f0000000100)=""/18, 0x4}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:53 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 446.973343][T21157] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x8, 0x1, 0x5, 0x7fffffff, 0x6a8739e7efcbba54, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="ff876b9aa30e9b12e528e6fc4e25b9550bc1b85581ddd10cc50ade2dfb3254e6de2427971a86e7eb027d347679cb40770f0817d51a24d942d3d3ae63f6eb76dc8d20d522678010b5ecc366fc952ae4f77ffa7f036d52f650f89e05187a16e26006b0304fef569e61b2b1d66b105f957d14", &(0x7f0000000080)=""/132, &(0x7f0000000140)="bdad8c3539541993348f2b7607d1e7d260b88d83189aed3bb345fcda083e72bc65221eb70998705091a90a843bbc5c84c5708cc410f6789a59fde97e643c3002e022f576affb56eedec73d82359f9694ffa3e0eb07b7c5f7c3807c21accc08e21d4a7f0b8c25b744cdbc35c7c495ccf24bdd8c20d63e7fff3303095a3819c6adef2f11857ddee68319e18699193cfa84e14feba138b15b557f110b5afe20c264ab2a4fb1ec64", &(0x7f00000002c0)="4304b316467c6d5768e7ce21265d059279f8eec6bd268965b379dba04b1cea8b250547d4ac486c261e39957cfb0b5e5a8c25fdf9599584518eeb2d239d5f175e9d13a5532580076f73834685695b26af3dda9b9574a5db0225d8dbe037c6a4d619125394c2c9077beffe2ecb7cd63a01f079f0285fbbbbde5576b60b44fd77aed3a97e4800368b40567151d7a26ee5f09f39ef42ac980b2ccfdab78261e64f4257872cda4c3360f9805ff3701dbc73471bc22ca533af539063db37fae5fb6118bb6aa8dae031b136a54d2db2252fb7a46576fde0a9b4967f4f589245a69ee446d1c7256808cf45f97ebb49fa998b6b8f5eb9c2fc3fdace77", 0x3, r2}, 0x38) r3 = socket$inet(0x2, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/81, 0x51}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000580)=""/4, 0x4}], 0x3}, 0x101) r5 = socket(0x11, 0x800000003, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) setsockopt$inet_int(r6, 0x0, 0x5, &(0x7f0000000800)=0x9, 0x4) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000ffdbdf250f0000000c00018008000300020000003000018008000300060000000800030000000000140002007767310000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="b61a619f231c453e8f02c8a1fbf6f3c021359e2cc100489e6736c53f341fce7bab210825649a358b377a8daa528501b5ada5f85593136ede3c"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000007c0)='reno\x00', 0x5) 12:41:53 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x2, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x15, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@broadcast, @private=0xa010101, @multicast1}, 0xc) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:54 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000200), 0x6e, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/170, 0xaa}, {&(0x7f0000001380)=""/74, 0x4a}], 0x3, &(0x7f0000001440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x0, 0xc00, r0, 0xfffffffd}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000000)="d7127567de950759ad231fe74f007bbcff1d8ea0cbd45e96050bd3e1614f4038ca2485f361206b9a0c414826691d2d440c4906be4cf33ed158f7a35ce228f2231e553ac8fa95c4c831775e8141067c25acecf5d7edac7ec3a3ec0c92af56d9046a31055e69cfe1100dccf60e8821a2170e0ce23dcf9a7eba0abd2ce747684cec9f750b177b5d54eb0fcc55b4ad1246a8e80c41d74e194431fcd040a57e29484eef4f7daef2940dd3e9", &(0x7f00000000c0)=""/251}, 0x20) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 448.061022][T21223] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:54 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8913, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:54 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x3, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:55 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x10}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001900)=0x0, &(0x7f0000001940)=0x4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001a40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x5c, r5, 0x3, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x3f, 0x6, 0x101, 0x400, r0, 0x0, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x40) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:55 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:55 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:55 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 449.304913][T21268] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x18000, 0x100, 0x826}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:55 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x6, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 449.493917][T21280] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:41:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:56 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x8, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x0, 0x9, 0x0, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:56 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:56 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:56 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8913, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x818}, 0x55) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x10001, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x0, 0x0, 0x0, 0x2, r2}, 0x40) socket$inet(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 450.595636][T21323] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:57 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8912, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:57 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x9, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:57 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 451.675119][T21392] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:58 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xa, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:41:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x2, 0x5de6, 0xc984, 0x13, 0x1, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x40) 12:41:58 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:58 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:41:59 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x8, r1, 0x33}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:41:59 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xc, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 452.719429][T21429] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:41:59 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 453.635509][T21464] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:03 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8913, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:03 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0xabfd, 0xff, 0x6, 0x88, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x3}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x200, 0x1e, 0x81, 0x4}, {0x8, 0x4, 0x3, 0xa6c}, {0xffff, 0x6, 0x2, 0x1ff}, {0x1f, 0x6, 0x77, 0x200}, {0x1, 0x81, 0x0, 0x4}, {0x5, 0x40, 0x6, 0x5}, {0x6, 0x7, 0xff, 0x1}]}, 0x10) 12:42:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xe, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:03 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:03 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:03 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) socket(0x15, 0x1, 0x9) [ 456.849830][T21546] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xf, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 456.957083][T21547] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:42:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x40, 0xfffffffffffff9c4, 0x0, 0x863, 0x905c, 0x10000], 0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x118) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000200)="2a6220c36115327fcf61", &(0x7f0000000480)=@udp6=r2, 0x2}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f00000002c0)="131d19ef571681d0e148a6b9d191f6e4bfd8aca6b4d9913b3b4517645be7f6d45ce94ae1c8db0c4daf10e8c9e62fd57aa1dc5e73639ff4b2ce010e712a6325fa0a23668436ae7c965f866a7fac6460465ca14fc33c50ef8fe3d4a9b86a0bec52dc4c3009ea4aa505c2d58d098b31c8a5b8c496202456326b8c3031884d2764ac2b8d2a5dec44f349f16e4e65dc26cf819f8f34b83d42f5d3df48d37ba2c15f85777859beb8fb01159901c6fd4ea432c0c031f8545b3ad37e7bb2a6b9d50c3deff419e3d3196b37b01dfd585058bc7da269418b", &(0x7f00000003c0)=""/31, 0x4}, 0x20) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000500)={{r0}, "f8959b2ab96e1881e13d323bdd35fe4462491a078f42c987953019a68cc76591097c103ed335fdde886f051f726376c81d9224bbd8727d9a637567483643d2781f065080c739b6a948f2a8635f187088d9c398b508e47f1cd61bfa719824d07600fc6a588f7c426cf473cb6e06a3cb209c176b58a081a4e2888069c61214a58c6e0b426365d56d6f086d8f14de424bb706eb735f95499486ccdacedb24ae4f88e93a990b0f5ef41ae12c426ff9a54e87c494c43ee718549d6ab242a672f0ceb921fa717d1d7d9cacf8ae14c2165603f71ccceb1710cd1070a324d5d6b90fdb37a01094e19663db67f8a7a39929ec59305ceeb7043874524290dc78ab752592cc5301d69854d99cd4fd703a57e8d9b73e2091c20a7f7fa5c6b058d91f4645ef4536982c445fa6f1862043b97abc9bbe381b4d125b3175109afa74400b0a69635cea644d423c2ef23a073353983c9d1e088399e044096b3bbb9f08fc507b21356e7131839d2fd43e33be6505565a450d2c11630505ffe3b97dbe7dcc84eef9ac15c1a7fc10263eca9ebd0629e088bbe29a38637e66b69fe623a576a88903fcc3a84b481a6e610a8960a4bcf7f6b17bfdcb48a5f1f1beef9490e9a254b8675206f392a2dee12b5adcab44c86d11347b8c690e320c8d501af743a4de0de3aca31cf39870a8e26ac6e45d07070f0da2b007651114f435a5770329d1f909d85956a88055954b5696e4fb72832c1b564238f8fac85e2b38b9173bb1077c409b3af8bc0fc8cc418b1f4f63531e986e14fdb4167a04e37f63b9d4df260361388522c53454047a7695d3b6e98c06ca77f382948bedde98abe01a145f3c15ca2e1e577f99169e1ec399b322ec1cf8d143da857a6598b78b3913e0f85cd463d80c911ec0d716a922a1d83bfcc141ecc49d3ee864c2caa7e563d583a3d92e13244f5f235b3401a088e3469f6d482f164dda08a273849c6ce4fe2253e127607c9f2d8f1a81f1fdc7b3fd806d005c8904b5105b5b3372a30afefb7f62cf3c652cad8f7f26da08fa7451957262be8a00b034f2ec25f75b22de0cd03d2bfe4db038d6e333bbf238f19faa2003949992e5551468037da7dd6c141ad4326fea816524c5d38d4610f119f43adc48b556c4335f1b3e56f13ef0d9dbb3e4515930bf0778f46e2824d8ebb78a98c516c7953bd7cea7fb62727cf69042bc7eae0925f97a687f75ed191461dfefb531ffbab7e85cad4f2117f70fbdbaa76029421858e89d74d2f0892074bf9c31e4cf98bad17e7c181d53c82ddcf8f263bb7ed34d4b96bcb62dcfa7a84bc1ac2ef5279f0375dee16167bc8cfd4264b79a81ccedb1da28e737139d5629d8e2f5ceef822df79114e6c581f688d527ae0361ccb8fd64277d1a06d03aff550848334a060e21bd2d6dfa6b558e173b0874415ef3b74c1149e12f7759bef5e8e8a0a76bf97a3147b45ff26d2fcc94afb9bd8196909cdef2282a7c87aaccd055839b6f0ff3fbff8c4b96c62e91d70809d279004b01c72c63ad9968116dffeafa0e32884a83964e183d8ec70e870111d92c3dfccb7fce6a8ecbbe0dd1d87f54b81bfc4b258e12159204987da684d5b725110f2a3d1aeeeb17f668f0d9edeb5c0fb41e8587e8ec49927cac0735e2e7ed3d37efc47fb148896c99f882de50a2768e6130fd6cd950518a37d89d862e20523c33399f45dad642b363b2f3ab8f85140b975802d55e1a800f9ef621b87aed22d08e719a8107036226536578bfd2131448ac3e572603a5f4f925696adfa40e226417d2f018aedb92c5975b801ebbb4b1736f0915c9423957b95978f77c516160696c850c8c691bcd136e14db919abfe716a0b7843494110ade4eb12e3198052804c826a66e0b735ecec9b1c274bd11fde212cdee51e17329eaedae499c035924e2563011941ac0c14c65eec79df1bbbd03121ddda7eb82620420b014213adbfcfc96871166f9c081ff146abd427a121bc8172a04641963a341db29c80b1844dd9b008dfa396b3a4679528424fba30b0cc629ee7a5d45c70f1fa871c629d9b315f284f173b9eb885a7683b2411cfb1b39679d13285477d990f99cc05f43cca67d24c8520063fea133d8f83b6af4a9040e978f2ba27e519fbd34a5cf7d96129a40f0419ea112a4d6f33f90e11f97ae4bb66e25c401e6404ddf07a378bce7db47b2f3d726a4979630ea31e240af0a19a78a394c6254fc0e96125f2755da5c8823940fc4a31851ed9175315c69b8fe6c975a304cfc71ac7c2c318b3bc31c1802d54c0657532ce1092e8473cc1c25a25af9410d83fe9c0a0f4c0876ac585bf66a856a77c193b46e44ca758b2e9c38beee0b31809806970561f84dcd96db984f1a821cee421776052b46c751da443b350b033febcd88d77dd0b95283071992acfdb4e4380426b9f92baf56dbddb6429ea82e6b30efd01701cc001a5e0f0058c5f1b3404b76c750434262f187628c9a4d2e29b631434ed9e9504833b085ff714ddb9741458754aa53c7da0c562d27aece398828a2213e0b7a63f5602a172d674db80187eaa7c40adbbc820143ba97234c6cef52494cd9fc02b2163f892804f92af83c7719abe6e35bff71bd66c5a014ac6f9c6c404d1bc91bf6e28b9b9ac6485c0d8ffc72023d151f880ef1c8e7bce2d8cdb448bc0f6d1d6e1a60e8ddebc3997603bb63ae938f8a0526dd5f778b87eaf6b6529c0b2e45c8487f4ea8c43d5dced0c4170ff9a73e74a278c0c7167e594f566018652ebc306858785530b4ff24e13f8f30e6961cdf1df23e9106b872ceb78467bbb8f655e1cea57c8eb4778bf2d87d7aa52b02b8013611c14d002fc9cc43d3d70d7c58767b2c6aa6e6a3ccb02a98b2920cc4b6bf3d88452496c18534aafb1459e75d6b3301b1f01bd7f9b5c8f45087814e7bad9494f8f702be6be3dd594a6369f16825fdcf1981b54d7c9e041adaf0f3e9141b9c4d3cfba3e5ef37c493f8a22e07d407444e6534fbbca5623642362647b08daddfef2e6df1e9211b7cba5df7a8c4fd21370423556d68169540a4a3bd1f7fa81fe3b304b39e0592ca1e9bceb31e8ef5af10e78c999c393c87cc66e4721a4a6160af4696b6daf580052df55c3a681e475cf619eaf1cfaa4c03da9b71522bad1ebc82e8127286fdc9fdd125c63c38d03d6994b8ea2c3f4608b210cec5210ad232798a0a4f126ff119e313c3b0c788ab26c3094f06980a0f1b970b611b5d55f3fbbe6fed8158b06d387e11ec5fa3b6d1f7923f97ba58ff7619c99fc756f9c93e206192edfadda072b2d76b0b93f9b6ed7e6a7dab96c4f81d1d7be3351e3b17a93ddfed4e125ce3a6d4de2a9e680919aa1b576976368d43d796743735e1d43a704d5c5befa12c0f0813d389e4116fae7052aeeceb69926351143949e40715f830afa5e541dfdfd86facd12c64f010ad71c9f5f9dfb6b7cade8ebace18c5c7f096a8a095f4428c0a599f0128e013540f868baf7c78618d9866901acb755269c964914a990b397300c17233bfbc733f07736a2e2a9f572dd26edab4c06a9bcaf89c7fd0f81fbe10099ebd943afbc47c73a6dd60bf5352cf6118b55640e29474de98a5ce017df27f58d1259af05ab87c76ba22b7efd845faaee12238a2f22beed39c6714725d89f9ea052f8c98564cbeb4823576436092766b54e93dc943880d9ee1ef376bb4bc5812f94de6472608f6499302b35a19b8b94386738509c351fa16de61da94f2bb5a23055dcb1f324a3abb97db815d0de0bd0309bddcc7da6c92be291de643e5e36c50cf35f192944870076155ad75ffc2952c550db0eb0754e4fac18d654236da599cb916534dc7baf4cec59eedeffa293e48b0bcd5445f065b049c346b9eaae65376ba820dd4296dfb2ec785c84ebc61a7dc1756b3d8637993beaf934de12e52f5326439f9508f1eba59ed4b8fb785b85a4946268afb1e6ddec6d5078ca756092dc4e11de34c9d1dfc9325f49be7ec6ec129a5d4003562ade32a9577a4a0014accf777def35d682f63bf1105fccc5c89c93ff3b8405a5e785691e7fbbf80927302688538fd017a0a11b9c5a4f886724cc7672e90584863845ee9445171a0db7269277b048471686607cc0d71a1714f4abad13dcefc92752b1478dcf96d6e58ea802fb5e029e75ad3227f3d949b92daaadb8a6d4a1826b1d0601a444042fb885ca53b0134384f53106e8f1619f6dc79c31e31332e4d892f9bf4641b21f9dd902639465c8345b955cfb5cb574b2156083d49a48af3cbf2dc3f652bdd6c6b092e9c3a1688e88217c974260588a48d2c97e51cd4c11e081116560e50028ee084fa11c3b4e8474e6a0e727c655284830509e3a29354fce9599f06e66025708da7215f6f829cd894bca9a1b45794c3a143f72e1d3bd22c9f5ef83327ff3ee1fe1b8b6c9368fd87f23b1fdaecfd6e48bb12d362d41b1edb79df95eee9a95e93a67679f1a5988dc881b300dffb190cfc414ae6d5204a4ab3a6779c573aa33322e3fefb4835c001c96653de34e096ad523dce01cf56d418f2a96d706772046f74ff4f4f32bdd4d754913f2fa719f31cf89b5cb4429f2cae863dfba04e274cf0f0ade997d3e6238efe4d80d469578c409c7e07bd4e2a4203384a1f25e78ddfe83d8f0639748d19da7b865f3b4d46c6818ae16bccc3c98f2339d4896bad6fe892eee7c307f182d6ea146ccfcc0a25d3efef7ddbae385a7470be8bae716977199abd232dec5c595c1561d113c69a35aee6edbe4a08c83c86d84fb1f7363c6063ebe1a4d096ed618174cb7c2e7cb38c144bce9983d4e6b6d98e878310a9fea0c104fbef111c0026b639012816fc91820e9df97b92e53a1b4a6d8dfde460e40a9090b09c4294b2cd98283d100fa600174ba830ef4087c48828784223c5cc35c5c7926dd2d0410437db0d16f32478812037a868fa729c1699eb642f9cf5c48e915d458e9976ce1d691b3133f7a561a81a34be9162fd3452a523f28b91c3abe9e23386ae0bd7f13d7edf222c20a4f34867ca7383d069b115fffb63f2a2372f9b688b07c3866ac772fecbc35c88289ad93c850189ca60872622b605379d9c6bc16e41f4e8cd0e02e87eb6f8b678e07d2735ce65bb142b6a3601e350e154ad522cc5121a52f7ece742dfc46e5b667a6b5c41e808780e3cb6b3c122a07ddd92858a048fa32c539394989a9f20ddf292822663f2468701f8f4be947ab2225ac71de3f2a77f2ba09cf254bdb7230149a786153b9e5331f39471b1ed9fc4c79b0943cd00552da74b7aac1b2c86b06a7e429fb833340f4d80a532161f56b786f58812612a7ecb4edf736441ae27b3e6e39cd4bfa79d5a86d87f4cef67b3ced8aa93fd9c4b4e57a2905e466912a7ed59df70f88c7f8f85c37c0ca6471297d2cc99900c654cd73e73d31f9c6ee9d64ff532d1df498e8484a2203aac669fad5100572976c1262d75af7261336d49b0b453b87205c34eaede73ef8a5d2c2a82ef43d69dc80a061e0cf4c24da0f84fdb5ed7418ffb99f3469dfcbdc4b0b1d202fe42e4d227da45d3d7ef3b162d3989ab370d4da99cab5ef37f210702ccee0c0b5dac8b64fbfa40fdb06ab5ed554e1baadc833621615291d8953d76a9652eda9607d4f97fe4e6792680f7028a81d333626b41f618bdd0e24b24c62a1f6062f4bb0e347a2740407a3830ff5f9ca658cc5857df9cf21a9570c87846e1c4ae7f8c1cb4b1ca4380df4f374df7c96d32198790f1dfe8509414e7f47e46e21822cf928ae9111eaba5be5312fd5793bd11de231fadc6f012112d"}) 12:42:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x10, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:04 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8912, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 458.033300][T21615] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:05 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x60, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x101, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x2000000000000227, &(0x7f0000000240)=ANY=[@ANYBLOB="0001000100000000000000000018210000", @ANYRES32, @ANYBLOB="000000000800000085100000020000000559d60800000095000099d8c87600001bc7c591dbe4c57a6b87b8f3bb22720000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x7f, 0x48, &(0x7f0000000480)=""/72, 0x41000, 0x3, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x2, 0x4, 0x200}, 0x10, r1, r0}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:05 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:05 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:05 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/339], 0xb0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7ff, 0x11, 0xffffff00, 0x4, 0xda1c}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e20, 0x101, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}}, 0xef39, 0x7fff}, &(0x7f0000000140)=0x90) 12:42:05 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xf0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 459.158991][T21689] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:05 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:05 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000100)=0x8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)="c5298c457da1488c8c7d54289521f2a38fb0ef3da488d5bb7dc79c121cc433360fe999fd4b531e24b7"}, 0x20) r1 = socket$inet(0x2, 0x6ebddbc96b83d343, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x0, 0x1, 0x20}) 12:42:05 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8913, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x300, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 459.649209][T21715] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000)="2730ff321a4a2c6d046e96a77eb984484b24", &(0x7f0000000040)=""/137, 0x4}, 0x20) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140)="21d1cb822977031afa828ddd529cfdc3c3e04e11a70372e76ca44fa637b7fd102eaf9733052da7e1e162aa37df074acf0674acc280bdff128baaeee471e89ff81efd907c3255dddae15b44f71510fbfd95ad4b43faa33ee83b50710412436b232e1ab587c3a371a65a78a7ebf2b101b2c1ec32ce52664825453414942ffa431d3ca21282773e576e459310616e66bf62c1a022d43779ae92ba6a39888f9f43c9f73880983c1846b0d2f4b89fe27a4969e2c64fda85189ca1d8424c149c8fb9338dfbdd67e7c5b45124a2", &(0x7f00000002c0)=@buf="35fdb720fd1064e2b3029996e59c18755bc30f13d8847ec5fc26a73e971f3529398c6992c3e81ed015c1e2e611ec7a8ae9efacf1cda2eaed77a124e0103f5f64cea85012978dddd398c95bc87c026907300ae100e2ffad6a256fe1c7465b37bbca4a3bfc7305ae6d1df3dea8f32aad0e19ceccd4db3032f9278a149b3051d6f1645d97ba402248b2b9f196c12a54d6de2b5852ce5eb85ad1786502d7a4e9940024bcf92f84f8c7412c8180c9c03afb7f052bb0862d2599795eecc7c60d66874eedfc159827bab38a4a8d94c0c36c1e78", 0x4}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) recvmmsg$unix(r2, &(0x7f0000005100)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000001680)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/144, 0x90}, {&(0x7f0000001540)=""/249, 0xf9}, {&(0x7f0000001640)=""/17, 0x11}], 0x4, &(0x7f00000016c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001740), 0x6e, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/127, 0x7f}, {&(0x7f0000001840)=""/237, 0xed}, {&(0x7f0000001940)=""/63, 0x3f}, {&(0x7f0000001980)=""/21, 0x15}], 0x4, &(0x7f0000001a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000001a80)=""/164, 0xa4}, {&(0x7f0000001b40)=""/186, 0xba}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)=""/40, 0x28}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/108, 0x6c}, {&(0x7f0000002d00)=""/29, 0x1d}], 0x7, &(0x7f0000002dc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002e00)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002e80)=""/41, 0x29}, {&(0x7f0000002ec0)=""/225, 0xe1}, {&(0x7f0000002fc0)=""/232, 0xe8}], 0x3}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003100)=""/7, 0x7}], 0x1}}, {{&(0x7f0000003180), 0x6e, &(0x7f0000003440)=[{&(0x7f0000003200)=""/200, 0xc8}, {&(0x7f0000003300)=""/149, 0x95}, {&(0x7f00000033c0)=""/76, 0x4c}], 0x3, &(0x7f0000003480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f00000048c0)=[{&(0x7f0000003540)}, {&(0x7f0000003580)=""/83, 0x53}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/188, 0xbc}, {&(0x7f00000046c0)=""/98, 0x62}, {&(0x7f0000004740)=""/154, 0x9a}, {&(0x7f0000004800)=""/179, 0xb3}], 0x7, &(0x7f0000004940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000004980), 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004a00)=""/204, 0xcc}, {&(0x7f0000004b00)=""/10, 0xa}, {&(0x7f0000004b40)=""/220, 0xdc}, {&(0x7f0000004c40)=""/16, 0x10}, {&(0x7f0000004c80)=""/144, 0x90}], 0x5, &(0x7f0000004dc0)}}, {{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000004e00)=""/1, 0x1}, {&(0x7f0000004e40)=""/70, 0x46}, {&(0x7f0000004ec0)=""/159, 0x9f}, {&(0x7f0000004f80)=""/173, 0xad}], 0x4, &(0x7f00000053c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000007ff9e24ac433fb7ceac9750000000135760002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80}}], 0x9, 0x0, &(0x7f0000005340)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000005380)={@map=r0, r3, 0x21}, 0x10) 12:42:06 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003b00)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/113, 0x71}, {&(0x7f0000000680)=""/249, 0xf9}, {&(0x7f0000000780)=""/142, 0x8e}, {&(0x7f0000000840)=""/87, 0x57}], 0x5, &(0x7f0000000940)}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/105, 0x69}, {&(0x7f0000000a80)=""/123, 0x7b}, {&(0x7f0000000b00)=""/97, 0x61}, {&(0x7f0000000b80)=""/69, 0x45}, {&(0x7f0000000c00)=""/75, 0x4b}, {&(0x7f0000000c80)=""/178, 0xb2}, {&(0x7f0000000d40)=""/25, 0x19}, {&(0x7f0000000d80)=""/165, 0xa5}, {&(0x7f0000000e40)=""/142, 0x8e}], 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="dff2e018e6cca6"], 0x50}}, {{&(0x7f0000001040)=@abs, 0x6e, &(0x7f0000003380)=[{&(0x7f00000010c0)=""/171, 0xab}, {&(0x7f0000001180)=""/240, 0xf0}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/254, 0xfe}], 0x5, &(0x7f0000003400)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000003580)=@abs, 0x6e, &(0x7f0000003640)=[{&(0x7f0000003600)=""/56, 0x38}], 0x1, &(0x7f0000003680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003700), 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003780)=""/7, 0x7}, {&(0x7f00000037c0)=""/211, 0xd3}, {&(0x7f00000038c0)=""/222, 0xde}], 0x3, &(0x7f0000003a00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="00f500000000000000f6000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0}}], 0x5, 0x22, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003c80)={r0, &(0x7f0000000000)="5c0da6844ec702f2a58d417ac8cb3892d0fdbe1774ee2480a1834b0e73e2fea427443f87db63916ca07d799ef055b9c4c0fe999597d6081e57903736270666dc9b20da7598d09c9dcc8017a031948e21174cf62432ca30c85f8ad569e9531aa5989d47af3a5df5a8ace5850702f472f266cac8c3804f952628ac75a3ff06d87ce6d84b577faa5e613c3e1105dc7e585877985cc56b7c632c0570d8600c98c6ef1a3e3216287cf127098422de83f01ba08d70e13c9bac50adb5986bdd4c50de9611f7446201b6d756aead5b141a", &(0x7f0000003c40)=@udp=r3, 0x2}, 0x20) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 460.239527][T21747] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:07 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8919, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:07 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:07 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x600, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:07 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) sendto$inet(r0, &(0x7f0000000100)="c25c37dd8201139647245d5701acedeba08d1c03f577d2e9f2755842475df46c1be17e773666e8ecbcdca3d50bfdd3be4a46d8f0405cd29ed1a019b0f8435e6b2a761599a4998a10515720cff6f9f33955dde127801c1e1a3c4c2c1abb21ddb600952f30aa43a6a6d0d54a144046b9c5", 0x70, 0x20000015, &(0x7f0000000180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getnetconf={0x14, 0x52, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24008000) [ 460.878990][T21766] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@rand_addr=0x64010100, @local, 0x1, 0x2, [@private=0xa010102, @broadcast]}, 0x18) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:07 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x900, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:08 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x900, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:08 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x5, 0xfffffffe) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="80c49810275644da9136d983aa771de9eb4172f68382c02402dcf20840c56b25194e72fed45bcc58bc6147b47c43b82d573ae9236a066ebeb69ff06146ba6972470ad786f75911ab1efd20f6616b45cc630273305b418774c98c0bcf62e0371a3237fff0191a92918426f2ed71b83f38be2ba4d2bf261d2ea10f17e41d7d2407eb7ab554e3d42968146667c168194495dd41cb2e18b029049226f17242cedd1610552e", 0xa3}, {&(0x7f00000000c0)="a8e2a52a4cc87f0fe4b82046a17e7df1dc0b7e37c6eebd40257793a97041298b7be002cb067cdebd7314292e01aa18b856f1a41d8d5d965fab3b835216d7c42e6455adbcc9f886a2e7f316da9dfab4e6c38ee6390b4897e28b46b8d062e778e4192ce88dde9067c2114b9661dc7edcceeb4c8a07af64026f550688bcae986a2271689b8f08c6", 0x86}, {&(0x7f0000000180)="a4d8595317617e354a4eddeed6d4de9d51d8c166477bdc56ff2987df3b610beedd2cc120368670e990ad4cf8ebb7363ba5c4cb0a4de55ca3dd9fca4b6087031bbf5268ad4cf4efdb05c50a137dfb2b472cc946f114941c5efbb1a222ae2c42db7b099868a0f470f02c5e8c3950b4dd7287dc3b353749f92fa13af90fdd2f1f72b3210e29eddd875e992202fceb99202895b164a40da9f30776af17c1d6401561f56d8d9ca997076da3611fea21b82ae98dd04b0bb8abaee7869be7c4332d6caac07bc90bdb03559c3da527e7cea1287c7351ae2101187f5ddce50118c98f6d36063ea3b4a2d3aed3e46fb857a511c6313e", 0xf1}, {&(0x7f00000002c0)="db3cf4cc00ff98df642d923b106d80e693573b86cb8c7649390a01112a76528a72fbf63e3844362484ea161e7bda9ecc2016b589403ee505d51ecdaf6ea2c4d1488dcb4b7bc787cfa362d41f26e637c28ecfa680a5ba91d28b25f328340ec46782a7c04798670cbf8fc0b3589f66b26a5c1b03da149aa204686895b52385e11e60f9051c0f2a7f839abcf9aad5894f6b9179d16ef82d46c872be6739a5ea20ff42077019e3bf15ef6da3d958e6c056366334c722a885c6fbdf54641d4c6f", 0xbe}], 0x4) 12:42:08 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xa00, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 461.893153][T21838] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:08 executing program 2: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x50, 0xffffffffffffffff, 0xadc94000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x1, 0x3, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7, 0x40, 0x4, 0x7fff}}) r2 = getpid() r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@bridge_dellink={0x228, 0x11, 0x300, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x4004, 0x20082}, [@IFLA_IFALIAS={0x14, 0x14, 'wg0\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_VF_PORTS={0x18c, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "f332e276dfeed392eb99eb05212db26b"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'erspan0\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, '!+*\x00'}, @IFLA_PORT_PROFILE={0x11, 0x2, '),&.:)&#\x92\'{,!'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "11aca678ebb7857b1a8158e1c023e16e"}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, '\']-^*.\x0e^\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a68e5a80a2e279176d61da18644ec849"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9b927ffc62ec16420e5319d3d7bf3f16"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d9e0cf2ded109ac2b241e9a24ffc3323"}, @IFLA_PORT_PROFILE={0x7, 0x2, '\x1c%\x00'}, @IFLA_PORT_PROFILE={0xe, 0x2, '!/(\xcc!{]*{\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ce5aa75d764f0fdebdd65365080338bd"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'erspan0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "8b90a3323d2f28f05f19a9c4c8819eaa"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'erspan0\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, 'erspan0\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "bad7ebd1ec1f14df48209c548c37f6c7"}, @IFLA_PORT_VF={0x8, 0x1, 0x3ff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ccfce9fdb350014fc77b96688c4c148c"}, @IFLA_PORT_PROFILE={0x9, 0x2, '):{`\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xfffffff8}, @IFLA_PORT_PROFILE={0x9, 0x2, '\'#j&\x00'}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_bond\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa9ac}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x659a}, @IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x228}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:08 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891a, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:08 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:08 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xc00, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:08 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:08 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x3, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r3}, 0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={r3, 0x401, 0x1, 0xfe00, 0x40, 0x8, 0x0, 0xaa92, {r4, @in6={{0xa, 0x4e22, 0xff, @remote}}, 0x5, 0xffffb4d6, 0x0, 0x7a, 0x5}}, &(0x7f0000000140)=0xb0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 462.622149][T21867] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6c0, 0x3a0, 0x3a0, 0x3a0, 0x300, 0x300, 0x628, 0x628, 0x628, 0x628, 0x628, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x2c8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x6, [{0x101, 0x3f, 0xff, 0x3}, {0x7, 0x7, 0x3, 0xa273}, {0x6, 0x2, 0x81, 0x1}, {0xfff8, 0x1f, 0xa2, 0x5}, {0xaa, 0x5, 0x0, 0x200}, {0x2d, 0x0, 0x0, 0x5}, {0x100, 0xb4, 0x6, 0x9}, {0x4, 0x7, 0x7f, 0x7}, {0x98, 0x81, 0x1, 0x101}, {0x40, 0x1, 0x0, 0xfffffffe}, {0x8, 0x9, 0x9, 0x1ff}, {0x8, 0xcd, 0x81, 0x4}, {0x3, 0x8, 0x7, 0x80000001}, {0x8, 0x7, 0xff, 0x7fff}, {0x3, 0x1, 0x7f}, {0x7, 0x40, 0x19, 0x52e8af6f}, {0x800, 0xff, 0x0, 0xffff1a52}, {0x2, 0x20, 0x5, 0x9}, {0x6, 0x3, 0x20, 0x1000}, {0x8, 0x8, 0x9, 0x40}, {0x9, 0x1, 0x1f, 0x1000}, {0x7fff, 0x9, 0x7, 0x3c}, {0x0, 0x5, 0x7, 0x9}, {0x3ff, 0x62, 0x20, 0x6}, {0x0, 0x80, 0x4, 0x7}, {0x0, 0xf5, 0x9, 0x1}, {0xb0, 0x8, 0x80, 0x3}, {0x87, 0x4, 0x7, 0x7b95}, {0x4, 0x1a, 0x8, 0x7}, {0x7ff, 0x1f, 0x22, 0x5}, {0x9fad, 0xaf, 0x4, 0x8001}, {0x9, 0x48, 0x14, 0x2}, {0x3f, 0x0, 0x0, 0xcd}, {0xfff, 0x2, 0x0, 0x8001}, {0xb7, 0x6, 0x9, 0x7}, {0x875e, 0xfa, 0x80, 0x8f7}, {0x6, 0x7f, 0x5, 0x8}, {0x7fff, 0xa7, 0xfc, 0x8000}, {0x0, 0x6, 0x81, 0xffffffff}, {0x8, 0x0, 0x1f, 0xfffff3d7}, {0x7f, 0x3f, 0x1}, {0x8, 0x80, 0x2, 0x5}, {0x5, 0x2, 0x4, 0x200}, {0xed42, 0x1, 0x79, 0x3ff000}, {0x1, 0x1, 0xfa, 0x2}, {0x7fff, 0x43, 0x8, 0x2}, {0xba96, 0x1, 0x0, 0x5}, {0x401, 0x81, 0x20, 0x2}, {0x9, 0x4, 0x8, 0x6}, {0x8, 0xfb, 0x2, 0x9}, {0x800, 0x80, 0x81, 0xfffffff9}, {0x4, 0x8, 0xf1, 0x6}, {0x20, 0xdd, 0x4, 0x10001}, {0x401, 0xff, 0x6, 0x35}, {0x1, 0x9, 0x29, 0x9}, {0x3, 0x20, 0x3, 0x6}, {0x0, 0x0, 0x80, 0x4}, {0xf0, 0x80, 0x80, 0x7}, {0x5, 0x81, 0x3, 0x4}, {0x4, 0x6b, 0x7f, 0x6}, {0x5, 0x9, 0x40, 0x9}, {0x6519, 0x98, 0xff, 0xabaf}, {0x2, 0x62, 0x20, 0x9}, {0x38, 0x9, 0x8, 0x40}], {0x3}}}, @common=@inet=@ecn={{0x28}, {0x31, 0x30, 0x8, 0xad}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x3, 0x2, 0x6}, {0x0, 0x0, 0x2}, 0xfffffff7, 0xffff}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4c8, 0xf99, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102, 0x0, 0xffffff00, 'ip6gretap0\x00', 'batadv_slave_1\x00', {}, {}, 0x1d, 0x1, 0x1}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x100, 0x7], 0x1}}, @inet=@rpfilter={{0x28}, {0x12}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x7, @dev={0xac, 0x14, 0x14, 0x3e}, 0x4e23}}}, {{@ip={@remote, @local, 0x0, 0xff, 'geneve0\x00', 'geneve1\x00', {}, {}, 0x5e, 0x0, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0xe269, @local, 0x4e22}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffff00, 0xffffff00, 'dummy0\x00', 'bridge0\x00', {0xff}, {}, 0x21, 0x2, 0x3b}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xff}}, @common=@ah={{0x30}, {[0x400, 0x402], 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0xf8, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x720) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) ioctl$sock_proto_private(r3, 0x89ed, &(0x7f0000000000)="c11b77a58bb3c268dd6f4a9507836f4cca38be98a67c228d678dba6981d92383c4e98d096d0ac89558cd5c8bcd7e48f30ba1751ed500713c189b61ce923f3895e76fa7460291c11ece3f1304") 12:42:09 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xe00, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 462.755390][T21870] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:42:09 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x3, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r3}, 0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={r3, 0x401, 0x1, 0xfe00, 0x40, 0x8, 0x0, 0xaa92, {r4, @in6={{0xa, 0x4e22, 0xff, @remote}}, 0x5, 0xffffb4d6, 0x0, 0x7a, 0x5}}, &(0x7f0000000140)=0xb0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:09 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xf00, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:09 executing program 2: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x19, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x200000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0xfffffffffffffdd2) r0 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, &(0x7f0000000180)=0x80, 0x80400) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000367dc11d46278b87726f57b773e6a79dca9f86e34723ddf856351df136f0fc1933c87b15562ffd3b2f6e8197405f8f12e2fd9acb7ee9bc652d027b14f52e980c07885bab06d8f7e67fd8b1754458cc1fcaf7f92a2031d92c00b03d1652b5b6d9d961d24df85978057a7e134cc97dea9b4cf37374a8a62dc82bef3a045793745b2b849de4a10f3e46e169f0d02c52533fed60c", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf25810000000a0006000802110000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x90) r2 = socket(0x6, 0x800, 0x40) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)="00dcfbf38746b3b53d872e5a0e6a519e58127da836ec349200f450e2e922f07059316e722da83cd090c9ad70ac01164cf1fc574bc2446d82b3216843edfe48fcb1c99201fe618971deeb3f9137448ea1dd7631bed9cb0cb67b67b329ee63b1be581aaf8017d71e2dbe2d9e335733cd9face7957a72417d5c9b4171dd44de3dcf2f8aa424a4f45ab4b846524cc2", 0x8d}], 0x1, &(0x7f0000000040)=ANY=[], 0x10}}], 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x4) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) getsockopt(r4, 0x1800000, 0x4, &(0x7f0000000040)=""/1, &(0x7f0000000140)=0x1) [ 463.234616][T21921] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:10 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:10 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:10 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:10 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:10 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x5865, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_FDB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4) recvmsg$kcm(r2, &(0x7f0000002ac0)={&(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/80, 0x50}, {&(0x7f0000001680)=""/67, 0x43}, {&(0x7f0000001700)=""/208, 0xd0}, {&(0x7f0000001800)=""/13, 0xd}, {&(0x7f0000001840)=""/117, 0x75}, {&(0x7f00000018c0)=""/18, 0x12}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x9, &(0x7f00000029c0)=""/223, 0xdf}, 0x1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000002b00), &(0x7f0000002b40)=0x4) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) listen(r1, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c541e09f9893b656bd8e13d9c78d9f2c", r4, 0x0, {0x1, 0x3}, {0xea, 0xfff}, 0x40, [0x3, 0x5067, 0x9, 0x9, 0x1b9, 0x0, 0xffffffffffffbd8f, 0x8, 0x0, 0x7, 0x5, 0xd9ef, 0x3, 0x20, 0x4, 0xee4]}) [ 464.381421][T21970] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, &(0x7f0000000000)='d', &(0x7f0000000040)=""/176}, 0x20) 12:42:10 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x6000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:11 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:11 executing program 2: setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0xffffffffffffffff, 0xee01, 0xee01}, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) socket$inet(0x2, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000040)="efa8b5993000e95cb18f4e454b7893785f961b4c57c46a87cef10e2ecb0a450a0d7922ef61de2f25f9f6cb789f8676763503e3e11a7e7d46346ad6b89187e827480865b7b99463c6399abafe21cdce7851289afd6792e37b834e10e1c61fa5a1c99e558e483ce7352f40bac88d5579860243c075e9c21d331a84f22e6575", &(0x7f00000002c0)=""/4096}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev, @rose, 0x1, @bcast}, &(0x7f0000000140)=0x1c, 0x800) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:11 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x6558, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 464.965396][T22028] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:11 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 465.490177][T22041] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:12 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:12 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8919, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:12 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "f57defef451d58286827310dcdee08ffb039bff1845276d7569228daca4c83892c5a1b99f74d7da85d3b7ddf96895e67e82a840f7572bb8796"}, 0x3d) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) 12:42:12 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x8100, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:12 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_FDB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4) recvmsg$kcm(r2, &(0x7f0000002ac0)={&(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/80, 0x50}, {&(0x7f0000001680)=""/67, 0x43}, {&(0x7f0000001700)=""/208, 0xd0}, {&(0x7f0000001800)=""/13, 0xd}, {&(0x7f0000001840)=""/117, 0x75}, {&(0x7f00000018c0)=""/18, 0x12}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x9, &(0x7f00000029c0)=""/223, 0xdf}, 0x1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000002b00), &(0x7f0000002b40)=0x4) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) listen(r1, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c541e09f9893b656bd8e13d9c78d9f2c", r4, 0x0, {0x1, 0x3}, {0xea, 0xfff}, 0x40, [0x3, 0x5067, 0x9, 0x9, 0x1b9, 0x0, 0xffffffffffffbd8f, 0x8, 0x0, 0x7, 0x5, 0xd9ef, 0x3, 0x20, 0x4, 0xee4]}) [ 466.124121][T22072] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/146, 0x92}], 0x1, &(0x7f0000000180)=""/50, 0x32}, 0x40000021) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:12 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:12 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xf000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:12 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:13 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000000)="23d31a83ccb1734ac5c5c3d73693237e63415c945f2c70d2181f632b917c32ad5439ad7d256471685d1b69d34401f573bdfa89918464b3d94b269c91e6ce757a68972be7cdb1459468f684fa47daf73305f0591c194b6831698697030d9aa0835d4e445c7523c1ed4fbd1e203b3a609188dff0bdbc5239714b139889883ba231c4e868227994e33f12de7a3cb84b7eed7aa741aa", &(0x7f00000000c0)=""/151}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'veth1_to_hsr\x00', {0x2, 0x0, @broadcast}}) [ 466.666769][T22113] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:13 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x34000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:13 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8933, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:14 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891a, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:14 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:14 executing program 2: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @local}, &(0x7f0000000040)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:14 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x400300, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 467.864832][T22178] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x18}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@deltclass={0x30, 0x29, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x8, 0x9}, {0xfff3, 0xffe0}, {0x1, 0x1}}, [@tclass_kind_options=@c_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x9000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0xc54, 0x9, 0x0, 0x821, r0, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x40) r3 = socket$inet(0x2, 0x2, 0x0) close(r3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'wg1\x00', {0x2, 0x0, @broadcast}}) 12:42:14 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:14 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8919, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:14 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xf0ffff, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockname$packet(r1, &(0x7f0000000100), &(0x7f00000001c0)=0x14) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x8, 0x8, 0x20, 0x1003, 0xffffffffffffffff, 0x0, '\x00', r2, r3, 0x0, 0x1, 0x1}, 0x40) [ 468.555873][T22217] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:15 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x1000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:15 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:15 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8934, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 469.135794][T22252] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:15 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:15 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00'}, 0x10) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:15 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:15 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 469.598808][T22282] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) sendmsg$kcm(r1, &(0x7f0000001a00)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x2}, 0x3}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="c12063a55d26f7306f5ef90c281cc4f141cac33ff76b7295af2712c72400811f42044131bc6d473e82a01f0055dbb9187b5cc51b3bb3de10e954c3766859edef65eb761d9569508ef8951700b127105abae3701ea444d0eb510a7f9a59e86214604ac8fe83c855e1525d9152cb5509a71a4a897081df2c0156c07bd7c3", 0x7d}, {&(0x7f0000000100)="889fe51a03c4056faaa3efad7803", 0xe}, {&(0x7f0000000140)="4792af0232f53abefbabffa441f039e5923b31d05fcf9e29624d6efbccde245e02a2e4e957bf197bb184798cdd4d34a70496c6828d5ba1d80eab2d877d03d12d3ea9ca2bf112c7741964c3993ad322a47e80dd28c7af6ae1b48fb7e2ca0350745abdf69e1959575ced36c0ea7714df0a06541df22a362656eeadc82221eb541e71", 0x81}, {&(0x7f0000000200)="f1229665b77c2a9f80abcee981ade548092a08ff7387f2360f3300094ef3b8c5c7a32ca1e5", 0x25}, {&(0x7f0000000240)="4f40f15d4d5c6e84579cd6b17d", 0xd}, {&(0x7f00000002c0)="545b6984095d488cfde1f4e6e7c744200ea012a8d3d6779ee77fa58663ca9e6ac28a8192fda30c8b42a1e99d77c47a49176be33b8404c7bbcc50fc100c8ed2926d79d26fbf64d21501a10d7d92ab71552cb33df3795f8d998480c6e0c71681ed3b7f2698185b938c816d9531aa64a83924f6cbde3b873b3dea5e30065310ac242a64d9cd370b2afa46a0a03d08c89d8962127cb6b9595c9659e72ba77553a6cb7331d57695e769e9cc84", 0xaa}], 0x6, &(0x7f0000000400)=[{0x110, 0x101, 0x20, "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"}, {0x110, 0x10f, 0x1, "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"}, {0x1010, 0x116, 0x4, "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"}, {0xf0, 0x29, 0x63a7, "c3f525ecaa037ab2083fa51b12715f175b15928de48e7fc5bf23809ce9ebcac8a102647597a683cbc762d69a75fd575e866cbeacb739b1c2a09fdcd6705597eba5292f4febc82f4fd1016a519ae37591b0caafda14bb07169db9978e7503dcd4f13110da07726b3601e33d1ed7101705c09a1920fd979824a40f7b7672c827d34607b65352d5843c2d6e4a05848b2a8ccaf0d6aa31aa1319f630de30f016251211491fa33fa616b4e3cd4b1550973faaf48ed61ef4c0b33252554dbbdd58f9a799ec67e6a679ebbf701a8719ba59c86024784a78fcee48fde87403216f5d8a66"}, {0xa8, 0x103, 0x5, "cd60790add05de83cfb8a313ca8990544460ab9c0c7c64f4bebcea5fe8707fd660dd526a64eeb407a4cb33f3825d3492905f4f72cc3a30bb4590a1b2692568fa640884f25556709698213afbe0107d482f92ed905e0bfe55ce6ae390de8dc1224bcbfef16f7ef43d743118a75d98fb641ed73347ba8453300c5143821300e3b9a75d2642f6d914bde41c0b1aadaa8c586c1b7ed13f"}, {0x80, 0x29, 0x3f, "eb8582e9a53d8b2896515d2f5610264b084c1e4c56da509f72ed52061cc5a1855bb0c9ae5b58d07a0eec3a8c55f64a930c44e0be84e179c679a7209c98ad56f567f1882167b83266e0791a9d789f153d22d7e17cb6b708da2e2f671da6f6af86ad80ddd95dda727d95e73f5305b2d3"}, {0x98, 0x10f, 0xfff, "1145eecfb7bcb3375944a27f078ede508b08e3fdb3259e3adefb419e647a6fe102ae8549ce9ffd0fdbdfb91b3a248ca94c05a73a761b554bb7e1e9add0a605d67916e1ccc3bc46e4ff9404faa56bb4369d17da0a9f742b4cd132741a2a1e34925966d8a17f3149925f1699e6bef1dfc347d32463569149f00b97db79337bc28ee675"}, {0xf0, 0x182, 0xfd1c, "411d6d8fcf6ddb135f80ac01577a78e5ebc1affc218a2bb42ef569a3d55d30fb5f8c9da08d69ab828057708e3834696a1d5be57f1ffa9ac311404440a828cd6830195c686e6f85b8b5fd56cbe7e91bc2ae026e46a78db20cd8438014d6d5df76c3a5efeba7f916bc3bfef436d3fde9968e8d636b51f0f9d68961b5639a3b8a9514addef3310a66ae08ca10fb236a176e7f669b02738b176068b8deea22896b3efc877576a75a52547af31bcd9a759aef2633519564b96674b9cf5f0a6a252c6f5952606389c3b78fcb9da61ced3ae8f2de8f3a853a18e55d12b7f08ef86801"}], 0x15d0}, 0x40) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) bind$packet(r1, &(0x7f0000001a40)={0x11, 0x19, 0x0, 0x1, 0x20, 0x6, @broadcast}, 0x14) 12:42:16 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x3000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:16 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8919, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:16 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x80000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:16 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x4000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 470.243703][T22308] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:16 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 470.807339][T22350] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:17 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8935, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:17 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:17 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xfe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r1 = socket(0xb, 0x100000, 0x10001) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0xfff, 0x8, 0x5, 0x6}, {0x2, 0x3, 0xb8, 0x6f8}]}, 0x10) 12:42:17 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x6000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:17 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 471.359125][T22375] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:17 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 12:42:18 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x9000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = accept$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e24, @multicast2}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39bcc4acfdbe0b95095eb71c743731feced5250208090f6aaeefb679c84c7c", 0x1f}], 0x1, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}], 0x18}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="391919f008e67903c7a7f7929e2de73f8aa8a0d54ee66ea51a786134ba3808e2372333b686d4671609357f86facd693d9bd6a762f7790cc707fe2fdd71955016709ba07b83c3dae8fbd05c6f885b4c9c4baa1508644105280b7ac76b232ae2594a2ca924c436f0c8804386c0b61f07bf1bf38e68bbdda2765492e53649911521dffc443bc18ea49a2f7e4dbe43e95005370f0c7b3b19fde658385160fe0e6be9b4c9c1a3ad3a0f1235558145a0da854e58cf1546530df813647ee2c4ba76c7cc428b01d64936748c57d750fe90c302ea40689f3bb63f2943d68382", 0xdb}], 0x1, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}], 0x50}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000003c0)="f5c6ae8648b983d9df820cc67d2b5fee9a7880a19609104e41034842efce10c3e4bd7688265b0f8186da9bafd4120f630f956c82af256d393b1ad66d4ece9f12a6825fc8aa5be75d33a7d6aac1bb0ac619dc428222114d8ce6d4b3863c6d567441e7b58d27d105fdd7e0488586bd17e92b5bc339a622e3e28590e54b4143b914a2fe4e7914475a585f9996c80ed274707538addcf873464576e44ab2f2c2f1e217325adbd9", 0xa5}, {&(0x7f0000000480)="354f38433db152409b6fc6298785f34aa2f0813e8270af3864f821036b59f9ced1c0d9d0ca7a68b104912112ee8d4024320a5fa88b82b597479523c52140875cd6489bb70c7ef748a14bceb52aefce8c717f4f89cddae79deb3fe7d25aac8ca50f6ca82e5372ae99751ab2ad0d239b5976ef9d6bfdba4e4970fcc8c58ff80ca1ebb629ccba8495c4413a1191e70a6f44c651bbece0c109d35b2b5666506767234a09cbbb0392ec2b6e1f2c4451b9f9c3602041f0ba848bd1318cc3972e15a5106fa20e5a83f8fdbc05c6e7f53fc6b3446db49715a6075cd874c861b7ab14b5f718c6e8afe1bf25af9f7602d09b80b9a99415d0bdc6d8a28ac671b06d450ce4f7ca3d9fe0ba5c03de640f0d98ffc0cda5a9634a90dc861597aa7c20ccbece4f1bdae81e3fa1f98456c6c252a365cbb6cdda7902ce9060001889055d51dbaef04be61e150ba0e54e20e9e3fd4fabf0af4c2274447bc543f3641fd6bfb361baf7b9474579722333427a15afe29213c2bfa8ff9184300f43136250d6106fe6f9d45de29a831e382630664daf24a80492cb2c7fbe32e246682d0d5ff01e654c6c452097a3f8851d03ad6696546f5a0f21e7b69866f5a688a638e2f11da575fed593d8466ce7bf1c1a72264ab22d59a03f63e713b8e4fd2994bbe17a7c4f0d514e473a1e08646b27b56b6b6ee04a10dd194ef112ef34377d81d1cc31fe3eac2c82deed516ac09178d09ebc6609f3d27f9299cbcc7dc3db4e10d044c6199d346905bea485f2e9d04ef46f41f26eb5c7efa2b0d5abc0335f825a0e2755153b67eac0241567704111a104d0755037e156c521f3672f31d108cd92c8665243bfd6ffd627e59c5bb7822d18838ed3e5ff473854059aa9c883fbe3d26ca77236b34dec0c919169d9624eaa78f418f371e9fffc271d066742430ea1eebe77fc707545e88cefa2741b753f603eb0cf592ea548551bf9b6a0e62cc65f04a099a67d27c9079cc6f722419548183740aefca4cbb298992e09c8e3d8e4796a64e3221377bc52ade14e9d3d849f81be59fd1c8c0e3718c1930d8cdaf4442c3189c797c4479b77443c98faddaa37ca6aac40eb5e43906625463e0d925b7a1603a2d0492aa022e725a2096ddad847d34bcdd60bad0fddfa1d4a2b591c0790d8aacce409542660dba49ac99b936f151ea70aae9d57e6d6e8a46ab82a372d08e9448e96e601a42662aa19bea5cf128b64d1712c7660dcbf97cc7cd049e6ec940843af2e0af4b2be158870df82c70825f568293369c5da1819a2da6b0a6ba7f2afaa907e1d51c3c4aded7204257d4de4f4f00ea85bf9c0203697d91116b8973a8254a2d0a518e107034dd441fb19594ff9a27eb64988103a8cc644c688a771a48b2c9990850d13b2ac6df611a44b02100ba9d1b19347bb7c4f1dd9610cd01fcb07afcbb9ee3af15ba35de12ab0845f1247da981f1c071f56bc5ffbd4ffef8433de034c9e5e90d34165f9fe8cabf4527794882aed82768341614b0cb6c152d702dc8f2c48525aba612b42586934bd872e4643163bc5546503792995acb8d0caed96f0733caddc041259c691bb23eac8a5d88801f59fdad424b8fb75e53c68aa609b34153746139445c4557101c332b73a887884a29cbfbba161c55d1b9fb6278b80048f7e48a52dc5d83db841dc4c7d49f67f20e0b5ffa788e6a154a235f6851b77bd5761eb1ad0c0f75d7c766cce3ac55305e276b6a45f195c08e77d0a7f153c226549f1ecfcd6fc471e58ada0eaf61b1d7f448d026e0c10d9ca745e53e85aa3ffc921cd22088ca4093ec04e7c820f8009b77e24e7948347769d138111dd4abf17e8733e9d43d127f283561e1694389d6a1eb149422a436cdb9403c67083d9cbe1f96c4c00fa33d5ef429aaaf346f159c0368c49d46192d223bf4fe4432901b45fcf0aae000cf0dd48b6c2908a6208955842315e9bf16d6a389f049e4d7e65dfa97b594a1f40fcbc495b04e3bf15b07eab680b21e455f08f630e81ca1dcbc28fe5555d8ef7c3209746fb8ff9af0fcc46328bb22dd62e7c156a42f6e2780954678d851607e25a250a33ff5ffa714781e9ece8e9cdc2c7d9688c732ec55c586243080334ed6b696374a2cce76a4512a50ba54b98b3b6c714ef9f2189631948dda5c6adfd62dec533b9fd4cce99dba0cd4f930e717dc7e228c33ce250d70713bd91d4ac88233cc89b86944ade0f9b6a2d4461969ebcc6ad7e5eee364adfc58739c3c904af375656ddf0dad2a5a7127294e475b3aaff93bc7682f3c9a3a77a1312f8088cef7b83c5bc352f04e90069a23b498ef8ee27b62062ac3c438bc2800e96e798a5e190ef6e32d263362cb093a0f5fa68d368dcc0a3825e075612c63697178c0dd8b05d7c9fb71cd1bb77b587a5fa08d3fc9022e25cc69ac1dca847c97afc6337a6c7600ada41d5dbfbfe19cd41af2def8e7bb5e1b67ede06a9e59b621ca81d1e021f30e1560d9ebdfe74f1f81493eabc8da6d1ad270bc43affe787216d9e250f34cae158e38ded2d576265af9691d425e68eb261864e195a52ee049061bc440cea705d9798a31f20b958bca542d91097b6233ec89ce2f78e7bc8e88eb0a74faaab878bb89daac67c46e4eacabca356430e91b1a56266b7ba4e30f9906c1593ad9780cc0820607fc1b3171f298a931cb087b0d70f060d32d24386fadeb462523102368b6a884754309361a157b8ac000549ee23bb33da0e6766fd9c336c6cd7f3d42069d6f47872a0a100050d28f1d7c29a2185bf0e72dadb21a0bade895959d8deab902ed2390e50846d32aad20f55a66905625177457975e09a4c97332059a949d89bf6de72c83a0b8ca5b0139a538629230486d1e671ad3fc892bdbba3793f191c9d94cdbe51c0c9f99797edb4d1b1c262a00fd4f9f730233adb6f04fd1e593bed700d87908119ba4c5f4c124aa82df6b83225710030934f7fb5150785e114cca48ea72c1084c376e50dfb34bc4c9b435e3e53cd8c49e705a9fe32a761690441717076d91c640388e80c9a5dbca9a21f1448af30e39c62118a1e33e61b67c838abed9faa8da17db15222650bf8c4e8cfbefc39e9e6368b7a732628917c7505b58044799823b4e00c0e0f0fc750e28a9ed4b4254c776b3b44487b182021f963b215a44b7b43a2dfc5220a5d1ad2e852c60561b0917f7552dc47ed4140b9a7fa87f9f5d1844aa9b0a2912dec8c2d882d1225993e793d7a1e4cd2c33dc79fa82b3787a0a43deeb82d25f55037b7c47775cf3bfff95b68802e6811c2119450eb7779236c7b50aad5f32f3d081c1e32edacd5f1cf278b66972aff55af7cf42f69ab4d2699893310be2e074177c9a9f1426fba9d51b5b2f04b84abfe077b9a5acb816624b721e0bbbaa14a6b5994c47b874f92f4d2f7c5f277b7f28c786e56a1c894127cace052500455bbce2f600cf7b31eeb77738982a21b1d459ae1d30c5ba36f705b779ae4b0627c70653de2cbe8bf84966626a7e04fde0311069e7c255bfe790a6adcd586cc381f53647205ac3cd281148925ab58ae16e566bf00bebf6d04ea885270e9f8e6b009b37d9ea5ed41bff1e8aab529ac92b110ad3ec4995863205d4d7bfb8db6ebdd1b1f52dfeb2e9f62434dbc46ae1617cad9cde0d3da91119c5521606ad23269b9049b9abc9520e9f6547ddc74e4c0ca1fb58d7bd43b3d77db368571e8ad9953a0a2b7a406c21647b592ce51ac6a6fa4bdfdf799fe336d22305b8c57321e7304b0157d4295f42f6b0b8ee307338b1bd8ecdedc25da5e92e2d5c23d03015988470c310452d88ab9fecfbe4c44a21ee083e353d570e436e6ee0b7fc27a1fa09a076692025296158f59f6e6ceaeae45262d9868266e98e54435ec01f507dd00c3445366eb1ea0fb38cffd1e8e521a0db8232f49aa7198582013040a2c0129d039f92bc83888240bb78456d4a9858c5ad02e712b7ddaa62f22634774722d244d4d6073be1ebd4e8cea3aeebe3202a14804222722649a6aff0d28021559f107c1f2b8f78ffbd73eeeac7963635b8211fb51a8bc954b88dcfd4ec8e37d4e73adf92e697ac147ba676168c5a5ed5c1faf61ea1472ec747be1cd62bf73ec196ef6ea5927d1e3f247d1b5f7e59800978b508d87f4321827405429451ae384b150828435f0cb1b1be442f990808faab30c2a8dc01f720b87b3ceccba22a91ce5e5cdd52e9eb1eb944c3a8d28285ec51d132fd190e68b119009ce306f5ada5d0a86d08e01e1cfe2d480035c60cb857ff5c7fea3f33bfc45f3648cf69d00630f9b3b326d5dbd79ea18d9d2a44fd432f082a08bab72541670621a5b31665af4c62f211f700a32abe290babc7217e1e7dddb99d4059d2b6485c4bd3973e8e9b4f8290ed727153d427a86d69f163bdfa9179f7e9d5f6f099d5d4ffb96fe5bb164ebb5cb6c09e101b16f13ea2ec93f0eb9cc28039c598bdf7a28000b54bfc58923f26957ad664dc830913e5466106dc502c0a85f1d0c0223019fc3c62162c6943aba61015d83f740f8ceb3e3d575133b6f60602534434f55a65896f01f7f716cb6151b9bbac4e160c12ab08d76e5146fb4786e92503c79ec9ca8859280a8b05984ea1d4f32a3d641fb095425fefd9b7be9be643e12eb67edbfab08afde963f368dc282f62186eaff6d0098cbee46f56cbfaf543d5913f041104e5bfc10b9935b53f56aa14025b3d8e619c3f930ea8b5d41c275dd66469ea29bd25029a001a704e2dce4b8999849f0914fa464b97142e607424b441b904a4487ecec1e2fc02a40ead618c84ed7589ad1d6e574074e82b1850d7041253c37532d2e49ba19502c86832bf94d51e9baff9d98e54e983ffab34855f50aa0b28974ea942ca95373386fdb5cb2b0210fc4f9b2fc7701b4cedb29f7953d72fdaf2bb3d6445690e0243df6b9bed30e1e62adc916ed12fd528845165a1234cbfda5d9534d36a5925bd9a4885ccee7647ca9644bd08fef5747778d495a1b756dddba97095a2249a94f43187eff9a0ee6c348db3209da904ba96f16cfe141cfad83e1a55c0af5b46698a8689e89a594211288b2a12da49a968939e2f22070099a73d10b3fea77239129a04565bb4b49456c67276d856f52548600cd2d83d8a4e35b8cd3463684b3315b5772a6f6a37d7eb1794dc32f9fc5bec37f945d316c77a474c12b6f0b34f041a56ea97678b52e90b22f6fe335bee9062c313214645ec4cd52ee141e8562551ec28128aeac7264cc31b5efcbee716bcbc08f53e1877ada500f9118625602f80eff10804014ac61a97bdfb1dd23e92e85592033f6c2e2c17067aa4127f117f867bd18116909c36ae1324a6e09e58b8a0ba2c89ea748052e05707ecc65eb935511b90d0bc803bb1cd3f1d5fa90d70e061f1e627f87df60c0422a129d818a9fcbafcb1adccce4fddd8a7264426786ba832a4bad181d17f737e45e8c754e4ab3361b3e3a9266dc3dc03b3d4a1207483f9c228ec51b2e231f895b31d355e6198e1f31eac6365bef05cec669468b4146ce50a27750c432554ae0d791a2bb5d118b9bd67857dae8529c0eb8c928991289ce2d202c30ccea39ed9395d650d20bb586e78907d43515f148175d659cdea56d29c70f90056730f0f7b67f5d7cfa76b7da909a8cebd03db89f432927682bea383c76ff5c82c1054d85ee86e6b333de0c6ca348d686a6b622bb30125922aadfc0d76691a6b7cc5abefece0b94bbbe599d1135de7fda387a03fbb54f1435777f6162950adf9537035d402d1a821c88d0d52e9ee7445c583945b36edfa4d7dbb46e9d9d1d38", 0x1000}, {&(0x7f0000001480)="df18c8da2f4bb88f9d2b4dde04f03574ebff5cb38ec2d845dd3a0a7e93cc84ec8152ab9df5d4536d2a92e8ec65a6441ac832064ca30c", 0x36}], 0x3, &(0x7f0000001500)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x6e, [@loopback, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x44}}], 0x58}}], 0x3, 0x801) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r7, &(0x7f0000000000), 0x248800) setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000001640)=0xebd, 0x4) [ 472.458348][T22439] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 472.581746][T22442] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:42:19 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8940, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) 12:42:21 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8933, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:21 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 12:42:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002580)={0xffffffffffffffff, 0x0, 0x10}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000025c0)={&(0x7f00000013c0)="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", &(0x7f00000023c0)=""/191, &(0x7f0000000200)="c04900014a97773dbc4c71ff0de9c4f20f64b9e67380436a4a28f7bf2d5cb46f2338b1fc21f09aef0a61173a1f55b1864ac51ef68d23061a0834069cac93fe828c55a0e3821646a39a163d1eb3263c3eb902b35f328a4634ea74b77a05ef0169388a89bfa22de3b1e3c9bb498c86b7723ba51602412754cade8fd82b971d23", &(0x7f0000002480)="79506907b8536be00054eae480fa0b79fabb3d122c68c5d35a4b36ccaa65be22b4ff92c59ca70c9bd1f33ac78724c6a537db74b822cdedfccbe1f20e314ec20e225151a95d0a9da4fde580262d6336021e1ca91d2206bc6915adc6421340b014957a81d0c1978ad5cd06c4a68843173fcf2e7f717579f718270daf4392b07a0a0d349c1b73c6493f26549ddd58b71aa67c45564e5ad7db54678dd45b8327e9eafc91def9c16623aa6bf13c23a793d1669055852fd0174be42614126c7511de5643412698c13bfa22d74cccc8acd74b8cb3d48bc43b8e8a433d86ad6301e3e5077c3e6373617e306ec27799887ff4cac6ff09b3c3f6f341bdf1", 0x8, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000180), &(0x7f00000012c0)=""/203, 0x4}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f0000000000)="950c3dd722801f3adbc96440aababb14bd70115e8a03b781d7b286fe798312f0306de8d61b6825b1d9516008e03ad1ab85664898633205465e1eaf930a", &(0x7f00000002c0)=""/4096, &(0x7f0000000040)="c5c8a2bb348f3e2f16785f6583bd4f418fc22914277567159e986de41a0afbf9fa17c8a37a875f5cb90b330e486b14f057af1b133fb3d642f10fc9755ab7440ed77c5f2fc38c8a76d0f32e7e1a84382273491229fade81a44b13fafe1b1a18e22fec63ac387ac22818059c33b4bdd7d419a279be27d9cb", &(0x7f00000000c0)="e649c0a5371d4770ee72c5fbcb66dadb84ece0ede73ca82811b2b96d1a5fc04568b587363981c807a34801431ac96301d9f6243c16e82edf6e4227f46ad4d5d369ba0f434653a3dc501dcc78c95d4e4539fde917d2d4e53d389c87b394f7aca7ce26c0cbdc43ea534b87cde4b9f0b4b1bf", 0x8097, r0}, 0x38) sendfile(r0, r0, &(0x7f0000000180)=0x7f, 0xfff) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002740)={r2, &(0x7f0000002600)="1f338493742ccb48bb5daad476dd403f6029b910ada4ba1d6911c7a8b3cf84e193d64a9f3a831c41787c383cd2932ef985085ec4e2f666605b349fe52d64cf1086bc75abf18a80cbc75f12d4af754872042c295d5f7ec974a533b82757ff2c82262bad19caa655d628441e17a12d4e58d8f65cebd86515d3227b643ac62480ad1626bd795d0743b227f06110595c87cd22c1f231d5a21f0630e1e88ef3e3590d6f00079dabb953522c001d0125a037e7624eca97bc75476c204b8dfe6b0202f7dbfc424a6f715510479feef0bea6deaba6272ef0d34df7a32d7cc321fa4eb3015458f810be9643e4e17c48bbe7268b663d666c2d161e7c1a", &(0x7f0000002700)=@udp6=r1, 0x4}, 0x20) 12:42:21 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xa000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:21 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 12:42:21 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8941, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 475.688052][T22512] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.stat\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000000)="826cd7ae8983769504d3441d4c025a8f23091c7245966516f5c3801309d0079962716c", &(0x7f0000000040)=""/189, &(0x7f0000000100)="3af2cca2448ae799da865c49a962f071da56efdcf859cd94e4e107ab789bef3eee7c5fa5994c1d550ed6206325e7a38f1adc0f2ce079cc1a7ff20c9f28fbf518e54a9670c0ff37ebfdd6dbdc1105c94bd540970e57e92b3c172bd483bc7048f4c6bd6be2e11af311a3f0c8b6d75ee53645000f68ff695d5025960eb7e13e69ce5d3a34b91d9966812788a36775142c62129c91e44cc6dadd4c428916a6f3993ffb4430cce97f0d015611196a147be1c909bdd14850cb65fee57b6d0a7d34a8213b25bd6f54a861858815b338f5c2f6c8a7f1", &(0x7f0000000200)="0185288b2a52b11ef84b84487b2490b22a1d53f12f4f4811036a60cbd24ed010f94ed1e1fa85570230807447f144337a2e10f932f1f021dc4c46709e4aa17c9df161767fe25688a9305f243fe69348cb9051edc86875", 0x1e7c, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001580)={&(0x7f0000000380)="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", &(0x7f0000001380)=""/14, &(0x7f00000013c0)="1b1119c3e3e362154051c58562fac2296809dca29c4f8b06d269376a175412981f115df4673c22f4aabea28a51e2f74c6a2cf5f0533cffcb60eae5f3500da9780163d41a1d2081a14ecab17917ae0096e2d649f32f3b689fa27059d906d6c12d2598e2b8b718781fd2be036f6f2f59fd71b8447881e9aec91e85bd381b64519c30b966a38420d13a6f254f0064aa8b1b353ff9cb5d4995f60bcf4f95c7de3a6f21", &(0x7f0000001480)="01e81fc66798f511acef62974748690b6db664e899081a5ea39584f96e9b92c59fb427251c6ab663ccb3a379402207afb5011f7bd252e36c4c4c0a4ff991fe0a684ab5b2b4faf4e382b19c0a0083a5ca3d2683b8cc7c8c6a6720e4f299793b72dc376526342789687c5f07f7d054c25ed8cf9eb280aa62f15b464973317b0cb02d51b0a3ec235fbae44f4aa14360928c2e76c6bae7bfad37d0025e70424307034bfc1e622b52f971744ad3b4341eb5ef4de9d26a29930813a0504f264a9e3fd44dc95dcd462af29a7af76d", 0x3, 0x1}, 0x38) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 475.916909][T22519] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:42:22 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xc000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x80000001) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:22 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xe000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:23 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 477.094353][T22610] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:42:23 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8934, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:23 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0xa0, 0xd8, 0x0, 0x9, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0x0, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9ca}]}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x8c, &(0x7f00000002c0)=""/140, 0x40f00, 0x3, '\x00', r4, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xc, 0x9, 0x5}, 0x10, 0x0, r2}, 0x78) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000)="f23c3e5c7fc990e2da34cd5cfea5119c1e7ac54ccebe83ece58d63521ea4edd40211be2afc0aed67866f8ccb7269b88f64f57a896739e2335ea55ac67739de78d1fb01e24a7bd48e6f6d04b3d9061cba1e959d7c7457cc8a6bf8ecfa123084090e0f2259ba7f26ca867f9276b6a3ed0a0c1f14669ff3f09884ab84ba5178c755", &(0x7f0000000080)=@buf="38ad5f68ccb03471dbda0829b5fdd8c93048a08f67279f9242bebf33a3e86c71ceb33ca593079537015520b6d8adc169214dcdb9d1e0f0a1b68ed67f7097c6a2d9b558ed567797ac745e9af5bfd37cfd123bc47e8077dcb84c239ff6c7738343b93835f32defc92e621c743a7208af446d5e09012c1823c12242fcf8758f3f9dd8c7fa5033557946", 0x4}, 0x20) 12:42:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xf000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:23 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x894c, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:24 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x10001, 0x0, 0x2, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000)="c16b9f3056ada019274754adb200dd7bb790ca63ab4634e195226f3f129bb0ed533e65ad18d56edc0f7feac4d7330c3c4b97c710e9102143a5c6df33a668f800dab5554af1fd64112b65d7027385254669ddb980da572261f49a32b2ec7fc816c6e8b300d51bb62e91a839d1b551df47eba214833b610fed", &(0x7f0000000080)=@udp6, 0x4}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:24 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x10000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:24 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x8, 0x1, 0x5, 0x7fffffff, 0x6a8739e7efcbba54, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="ff876b9aa30e9b12e528e6fc4e25b9550bc1b85581ddd10cc50ade2dfb3254e6de2427971a86e7eb027d347679cb40770f0817d51a24d942d3d3ae63f6eb76dc8d20d522678010b5ecc366fc952ae4f77ffa7f036d52f650f89e05187a16e26006b0304fef569e61b2b1d66b105f957d14", &(0x7f0000000080)=""/132, &(0x7f0000000140)="bdad8c3539541993348f2b7607d1e7d260b88d83189aed3bb345fcda083e72bc65221eb70998705091a90a843bbc5c84c5708cc410f6789a59fde97e643c3002e022f576affb56eedec73d82359f9694ffa3e0eb07b7c5f7c3807c21accc08e21d4a7f0b8c25b744cdbc35c7c495ccf24bdd8c20d63e7fff3303095a3819c6adef2f11857ddee68319e18699193cfa84e14feba138b15b557f110b5afe20c264ab2a4fb1ec64", &(0x7f00000002c0)="4304b316467c6d5768e7ce21265d059279f8eec6bd268965b379dba04b1cea8b250547d4ac486c261e39957cfb0b5e5a8c25fdf9599584518eeb2d239d5f175e9d13a5532580076f73834685695b26af3dda9b9574a5db0225d8dbe037c6a4d619125394c2c9077beffe2ecb7cd63a01f079f0285fbbbbde5576b60b44fd77aed3a97e4800368b40567151d7a26ee5f09f39ef42ac980b2ccfdab78261e64f4257872cda4c3360f9805ff3701dbc73471bc22ca533af539063db37fae5fb6118bb6aa8dae031b136a54d2db2252fb7a46576fde0a9b4967f4f589245a69ee446d1c7256808cf45f97ebb49fa998b6b8f5eb9c2fc3fdace77", 0x3, r2}, 0x38) r3 = socket$inet(0x2, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/81, 0x51}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000580)=""/4, 0x4}], 0x3}, 0x101) r5 = socket(0x11, 0x800000003, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) setsockopt$inet_int(r6, 0x0, 0x5, &(0x7f0000000800)=0x9, 0x4) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000ffdbdf250f0000000c00018008000300020000003000018008000300060000000800030000000000140002007767310000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="b61a619f231c453e8f02c8a1fbf6f3c021359e2cc100489e6736c53f341fce7bab210825649a358b377a8daa528501b5ada5f85593136ede3c"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000007c0)='reno\x00', 0x5) 12:42:24 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) clock_gettime(0x0, &(0x7f0000004300)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004200)=[{{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000003340)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/44, 0x2c}, {&(0x7f0000003300)=""/38, 0x26}], 0x4, &(0x7f0000003380)=""/81, 0x51}, 0x5}, {{&(0x7f0000003400)=@rc={0x1f, @none}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003480)=""/202, 0xca}, {&(0x7f0000003580)=""/253, 0xfd}, {&(0x7f0000003680)=""/246, 0xf6}, {&(0x7f0000003780)=""/162, 0xa2}, {&(0x7f0000003840)=""/248, 0xf8}, {&(0x7f0000003940)=""/63, 0x3f}, {&(0x7f0000003980)=""/89, 0x59}, {&(0x7f0000003a00)=""/14, 0xe}], 0x8, &(0x7f0000003ac0)=""/109, 0x6d}, 0x8c8}, {{&(0x7f0000003b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003bc0), 0x0, &(0x7f0000003c00)=""/8, 0x8}, 0x8000}, {{&(0x7f0000003c40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000004180)=[{&(0x7f0000003cc0)=""/82, 0x52}, {&(0x7f0000003d40)=""/253, 0xfd}, {&(0x7f0000003e40)=""/225, 0xe1}, {&(0x7f0000003f40)=""/109, 0x6d}, {&(0x7f0000003fc0)=""/119, 0x77}, {&(0x7f0000004040)=""/239, 0xef}, {&(0x7f0000004140)=""/50, 0x32}], 0x7}, 0x49152268}], 0x4, 0x2, &(0x7f0000004340)={r2, r3+60000000}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000004380)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000000)="914249c8443ecc8190b54d35a017edf61a36e977d223dc396e0748e5e1430a9fabfc60836dd6dbe584a2d657b9d1dcb1c0046ca0d843097453e9bb3813b3572368fcb76c60773ce692f9fef4e02e21c4961cbc26cf13306f0e77716901e224901e1b922f1862eb2be699130b0e30761eb2e8a1a51072", &(0x7f0000000080)=""/33, &(0x7f00000000c0)="e68db7d167babd6415c0954b79e0219887032b479087fd6c793615261a4bd66cc28b90b38d12be18d7cb33640acdc146acffe6b5b6c19bf50534ea6947d602b4fb0cf01ab262f794aec644bd3380a69478fdced09a90da4cc2583c23b5ed59780106da2df6e05687c322e36cb22c70f30a8bd3f9893afa7a677a81fce8657f7a9629214eb2a4da806d6e9330fd59e6cc6d13fd6b75d2f2281e8555454834f8ccb1b654adc3131829f60cdd17161e6c054ac678c6bcb6718cc324092e027418eaa2f9f92d47a0", &(0x7f00000002c0)="ec595981fd183eefcff320a5dbe34f2c5acf44d45fcd64ae656d7da5e439e22a4052ee1765f18dd50d4a62316ee6809d8c19dac498bfdd5288ef246a9ce837ee1aa40b2ea105ca2d693f25b253ab9dd95978d9f08069d8219f25e969c1973d20eb3251d305cc41b59a5e88a6c663ae80bff8954323ae02f39c4fb3e1226005b502e94e560c9076480b5068db1d0127eb5c675de47bd4544679db49872b5a3df7098c1db8d85d988a9cb7c781344504a09990bf7b311735ca3d970f4520010a63779bc5a1af44b221ff22222868f924716ad2a55c6230e83ff33944d4528c730375a7b639e366aab8307f6b74abc618fe11c20ca8bf583ebb9ca6bfb25fcbf4c82434f701462f147e80afd720cb8a1e2108650f9b7f3fcd6c2b458463eea4288df8db5ffa22956e7c9c5b87b48e5c0b060679c1f65f4bd3d0dfacf65e91f2535678729d7d9bef79af2e39b029d63cc07af88ff7f4e9d9197d848da72169bf0c15153f0bd2ee7449064363bc0626e86651505b41c8446fcd24d92a7da438f57c116beade2e572ebc336aba029b82c8707825420b114cd27704ffddb723998216e880a7e03d06135c5772c16cd08598d4730c30a7688e451f241b5045d9404d1dcfd3fe9b8d3d78c335b1f34ed1e116063f4ee0e29ba3643fbf111ad4841ffda7ebb628062503f7a9e60dc3d3d5ae9e4ecb3f995da3935b67b1935d754bca328a3ae27e753919b262c98f952ff9acd9336e4a211d5c80c0c63e9fce627bfa4bf78cb5396368814bace06a97ba575517c3ade23d2493f2ee4624d1491e9accb75218e41e90df6365959a49a569add01eb57860a7741195859273a85b8150b40d07acd45110f40d27c9e871a5328205b9ec66e45a146aa05322af73c008a13f0812a6a33f72a6bad144da6f3c5bec8ab893082a46af76ee348044238e249e84b9b68b1c3070ac1617ffe043248f0bce365c70615a9860a7df35fb7d5c2a2d67c3b8bfa65d03ac35cffab983a3f60b3deecddcc76941be3b406c5f8464d57131e6cb08299c37ee2c1aad4a0f7af6f28647e80453140d81fa583d22c1574bff2fec9657585c5135012ce604695adfa991ced223caa1faa7504e7ca0619edb4ffbb63daa0a0fc3cca033e2c560c1f7cb741fbd625f5a96c6996a8ba019af6b0de3c81a3955997707fa9da776a43cbeca61e4b664dbf1c64f38a12131400857c879c5e7daac57a8bb41aa0312227f7c4cdad22f0f12e3ec8f34da94f52ef60821272e46e442435436ff0fd0bf0afb7596fd4b0f19206435d2f18da22487659aeddedd0f0b7bc8c34a6668e3af7ed3b8fadb4434ae1a14255a862f95846dea46f9cbda4b72b06c2c87d5f1e6785f39625016ce14081be726471c02f3d4e400472f00ba0039c6a69798ecf773d6198700573aa15ef14b35ae84c1a31fac27c79d8f749d3069ab3351149556b0b0e32d28d0970360a288ffc5df7a20500155ae341ff6ae9ea621652e372013842d93b06fbc6602f68b8becaa6631dff2f4df344616c81c0b738b668099bd42509863ed841aab319459d2b23d0a63624e3bd4198888fdeb1e98e2502ae0019b6ab0c76f0203a1ac3331fbc9b3297c07e8a3e084fb7798d25fe449754c6edae1bbff8ce94d5d38eadb292266d746254634a1092996414e5064f337b04499378728ebc9f0126b0c94556fb3f0d959d0f8db8c0bff246c08e2f008ff2a0932824f180629a06d4cb2b7402fccc4d6cddbf8a05a3968dba2592975b7478d8ee01960dd621040ecd1e893c22b80761d86cd6d3c96653d258411f02d7b21bce1c49bc08462d1b7d36bc5d10d91c34494f9f3ca522d0c0e5b8f934fc307008bacfaaf74d9d3a44cb9720ec48a650f62246a778d7309926821a0a2310b2028c2dad781de2a026ed527cd5eb1205e8898e87af2fa6411f0aeecb4074289ecb623e73e374a66b795b3c21957cf0fe93adcf87a2f7e3bcc4ea2bffebadf563e40bf96545d5ecd4864d74f6f975535bf3fdf3be5d86681d5aff8f63126532331c39a6ed1e3cdbcd8dec7f3f82505b43fe4feff7c3a59b968f421b88b30f36f02c65cab1b03d30afd0b874cff3f37f203ebecba3d0d164447fc31c2957af99c827320fbd6dcabb7aa55aefed9ee6842951c7d60806dbc8464c8ab2dcaaff79f3ef343c083eeb11cbb6a1e3800c8459f478f461667f43045f24c18b09e461143befdf0cb6aeada42b2676f5f715ea757deee26d3c8fda348bdd4ec7bba2c0ffd510ca7fb1161eb648c9092c05b4201225755d6469b7ba18b51ca0c659c6b8e1bcc92daac7dd1a2aa483e187f83b768e511ec7b03625e874bbc66cad2b9c8f576304f6914188eb3abcf7cbe5f2500b16ae22aeb25c7345052ac7dabee188ba2c9c026bf79f82729fee4c23313a262baadf6e300a5d133320891f16650f0e3449e97900fde0117a50981d8f7255a3864256bcb7a852722eb76eb8207fee4d29f1c3b78385a951ec816d0314a8ffa7f5623bee94a67201c104cc0d4ecef4d29525c7a466016980896a74e54db163a5f0567532ecd9d907bca3d27bb8e8a41e2b94e9f72987998b70d366e93ba64635686400f82d4bda6628b347b1a4211b89ad35f9f6c7d06ec29da0659fdc0be644eef3a7dc7292ec87e9e82c9cab516d24c6f7d4413369be25cff035d099d782a6d7920de1026d3a04724cfb7569aa813d27b6fe59d9976b2d6385bf008203ce17e525b869373d38ca501bc3e389d5e02570cd193a505c2a7a65e52c182a5794dcaac0051590e3a6bf38c3aef93afe71be5eca76319cb3edc1b9aea9e45b480a7c0f22ed87488890e7f5371582498f5e0398fa2652a61cfe385ef34dbc2d2769539075e5b1bb41d33fba09dc5c9287bb54ea387e658571c4beed9e82a87c7e41552de92417946dd51f1c1fe9c700d67462ece072eafd9e9a06486c849af078eca79d4bd398c2cd686affb54339f554fdf5cf309b4307daa9a5119368a29191cff21dd697c1cccfd74a8ae3fce042b8b6d5cee2d2ec188ac1d7a9b59ece803b6df18ecb60c8b2a9e9012a1f25075b93cbe3bb0371dcfdb91be7a8ad63726b50b06bb2a5a5e0c706173561ff62fdd84da68f07ca4672d8e843577098e4cd0f9f9a0047a632669eca13d4932b01dcde741e4dce579932b068c0c0e9ed4790713339f83cafe93df1d2d9d6467565068186d489d36237d4288a018c12b23ed1683bdf592a471cc5150290433d89cb287b1eb023803c8851b95ad455cf98460f8dccbde6ffb996be6fd294f7df76bda91d8b8c85af17622505848f4f6fb43d79396679faa533ad3a935010b8cdb714a50aeeb606995103672e6c1f54fc5cc857e2f50cf3580b1f2fe979ec7aa9eda0a76196646527e58b0dc3365050b50fd94a91a66ea73c3415bfc5e1928e7b7c3157b72449999668c28a504c3569d4910860ada1d93457cc0b9f28d82f349af05f17a386ea6d91acac7dc135d8a4e5c78f4f09be829572afa6c915c5703d4f9d35802e6cb461081be765d05cefd3d4c8fb9bb4512af5dfcc489baffa7d430de552b14af26061bf3b09b2c55d004d5bf585f70a4f9ec9bf9bdb6f0161545197d695c8b75851501633717d213f8cf6286991f5700feb5af385422935501a0d197e91810e0f7b0cb175eb33625da45ea6795b08e118078bb88caeaaada66c8486853676f8876a12e4db86435781887fbc1b7341dc7442567c8f12cea8f1abc95ed8b95adfae49e73bd660a4a1ae28da193c862d15a2fb925e4bfd1f6ba8456c709ec6da1106194b97af1f135e5ff7eaeaf01721c093cbe6e56a018557b8b7351f27dafdb59b97a864e31f0379c27d30d7f3a2f0a96388f834396e694d98805398d2b7d207b0844178559bbf53d79d19e2ee6bb5bb8c6e433c68d4aa1fc95e09f309c0573f8034e60941993654bbd225e07157ce11fb5e1307552bc0c8ec92624ccef35e34b0de9683f61eb45754c8c4fa7c93a558516898f658aa0037351410213a3660798e4da9a28cc80281f610f3ea611f02b43807b7ac9aa3ed064c23ead41b8fdc8fc591eafde050c734bf227f36b556aea2d7e09459f1a0ab45e7c4b5f98733fe508c97c28304d0cc197d477b61a4d847178d8549a0d284c08746a5f840c6d593a89238aaa9b0610293eae7a510ae1800409af0ce8f34e9a2637f18c5a20fa52200869a6547e8c12ff1671da391e78fbdf2b29effa38412f87d664d171e789b04971dc8a0edbf3731af9df93563621d49886667c0759e1551a0e6661896143612ea0515f4abfef334e6552322aafb6a7e0908c49cb204e0b21e73e06d164f88fb44fc68ffcfa3d2ed0691917829cc0e0d0cb75651462acf2479c7820862200cc2121cb260a4edce8a6d1718e8d91cc5fac194842d75eb2867fcff392ed94d125a052499b6e2a65d793a06997fd05a028a2c1e8f5176c95f62388910ca55dc7e1df7042806c7cb7ec1dac2edfd1f8b8ca3fe4bd79b57d52e161c338a60f9f325d656929a36bf9c05f71e2b955c719bcfc6aba02de127486b1ea8f06f7e2a57250097baadd59a15883133ebeed4d11541819652ed16e45ab76a219d206c7c4b325f5c4ca9cac60438c4a6a6306653a4a5b0b782a016ecdadea2d9e4fa79d42a3c3e5f91b20f7f94a173b1a8d15118ad45f6b6a5ebfb5ebd744afd9d8a425a75f9101990a1297fc1086a848bb4c860b930326ecdf49d293e1d108586e52a5ae1ae15bd9108dea6d1da130c16e164e6dde5c84e706feed98987de43bb210bf2a974057b068a8d7f1f217d13df2529a0310b24556337911c1e771665dc78d64ed3a8374afaa50347957db6c6f15e0b46f971d66f5fad2e6f71dba5f6fee30f2755fbf6324bf57a181fe7a00c3d3774c21905ea1e5e4a36d163791c3342066967f1785f8c4d8b1bd1881f9fcddb7fa63380f5d7e8784ef7d73ab0ce1908a1d85c0503a20e3e15601bc516d0e779188201448259ece1864a9d5ad4b00b5cae812d29484e52e02d59d75ddd628dc19a1b27ec2a7cc950503134594714e2ca6e7350cdcf468d411b23e41fed75b20b411c29da33ebd2a89054bd92b985c0d1a2d3310bcdd740276ed25c606fbcae8ecc488c782b267c25518e6ccc338b09622f77891ce0cfcd64650beddcbe7e2376eddc075d277d1e3f933c825fc13ff0f44c4b69393c4020be52f744ef0b8db7f744a2a24cd0a4fe915beb2e16b9f78e48f9c03b43bb83f321c0521c2dfc38cd0fe7bc2bfd40bd9ab6696b653077e4af456c00b1d4630b1ea8153ced3eeca322dcc1e6b36a8b946e0b9f01e520fa4828ee95c582b19efcdc008f16c345fc9b9106f5c153e8a901fde5c96d4539db330461da0285372ad8ec772845d69341f2eb90a9102cfcffe3fe70d154a2327c8662fd4fc4724cfcb2277725fa46cc8a7b00c1af3f98a24f65996a580f8e9b8a0f12d267bd676c3990288c735658e657602c0137f687e6cc8569f04e5bbd2b0349a1a9089072c8a68ab83e24c1131e3fe523eab33824cf13a775b95fc3c96217bc1bbdc93841f07d310dbf6902fd9aba55bbb5bcacf4a96b9b0e255b8c25620f8114ad21af8440529e35f76002cd0839b60e6fbde09e111bfa04530099dba3fc4ff3fe1bda659ff2cbb41533d87a86ad8bb3c46f0c41cd08c86e4649314b6455427f9ba300ca6ba1d69f131ee69762d7b14986f9eccf04880e5c893eee889efbf38a74162d275fdeeb4de36fd18d3ce9e7703be69c1b8b21393726bdf9b94fbf8534f20a0111954c7c31899ca2ecc1d24", 0xd26e, r0}, 0x38) 12:42:24 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890c, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:25 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:25 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x60000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 479.194839][T22718] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:25 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x627bf0a5, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:26 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8935, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:26 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8953, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) socket$inet(0x2, 0x800, 0xcb) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'xfrm0\x00', {0x2, 0x0, @broadcast}}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x440, 0x0, 0x310, 0x158, 0x0, 0x310, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @rand_addr=0x64010102, 0x4e23}}}, {{@ip={@empty, @broadcast, 0xff, 0xffffffff, 'netpci0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x84, 0x3, 0x4}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@icmp={{0x28}, {0xc, 'kd'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x1, 0x0, 0x3, 0x2], 0x5, 0x7}, {0xffffffffffffffff, [0x4, 0x6, 0x1, 0x5], 0x4, 0x2}}}}, {{@ip={@empty, @empty, 0xffffff00, 0xff000000, 'ip6_vti0\x00', 'syz_tun\x00', {}, {}, 0xc, 0x2, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) 12:42:26 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x65580000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:26 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8934, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 480.174224][T22769] x_tables: duplicate underflow at hook 1 12:42:26 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x57c5, 0x200, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x40a, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, r0, 0x2}, 0x40) r1 = socket$inet(0x2, 0xa, 0x100) sendto$inet(r1, &(0x7f0000000000)="994bd61f626724f6080f9fc0b48fe15bc3", 0x11, 0x2001, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'nr0\x00', {0x2, 0x0, @broadcast}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r2}, 0x10) write(r2, &(0x7f00000000c0)="c81fa37622dd47c00c3b88f6529d78d07baa461317c3d7e7fb5797afd7e2ef8a046feb21b4d312af31a1df73ff280919218b48201cbbc8695f6f7cd13dfc86", 0x3f) 12:42:26 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x894c, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:27 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x81000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'nr0\x00', {0x2, 0x0, @broadcast}}) 12:42:27 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:27 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8940, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:27 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8955, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r0}, 0x10) splice(0xffffffffffffffff, &(0x7f0000000200), r0, &(0x7f0000000240)=0x4, 0x3, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1eb730dbbae123b06ae3a589d68a7b272a712c7b413a9002c686548deffa0e8804669fade129c989c9e46474e7a5f9b4f89ca31b607700569926045d65f9534ceb8675f54261789e640fa707d6cb9aa304235c65edfc372dd14133eb0883fd", 0x5f}, {&(0x7f0000000080)="1b73a7664af685ac682f85664b02f6f4f7147341125996f942e3cbb9255713a02233219edda02e0fa200cbabff82ffdd259acecd8d9144c5745f2085afde77d4cd91fc4d197c695a208a0959621c69dafe107778c0d8da749f54c9495a73a1629c0034a98a431205396c3d589a4d1584fd5fd180", 0x74}, {&(0x7f0000000100)="42100334d407695f70d5d72f3aec75c6abfbd234a6b960f95a310e3f1832a903cf08523bdd3ad65f1b93637dd7b38df36e44980c41b353f97125b5814ab147e4bf80793d3a137faa9e1f84109be5387ebc42be612d77167c8a4cd9a3c239474e396373d5cfa4f51226f6b3", 0x6b}], 0x3}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x7f, 0x2, 0x81b}, 0x40) socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @broadcast}}) 12:42:28 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) recvmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f0000000180)=""/171, 0xab}, {&(0x7f00000012c0)=""/233, 0xe9}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/165, 0xa5}, {&(0x7f0000000240)=""/37, 0x25}], 0x7, &(0x7f0000002500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x2161) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) bpf$MAP_CREATE(0x0, &(0x7f0000002600)={0x18, 0x7, 0x10000, 0x0, 0x8, r0, 0x401, '\x00', 0x0, r1, 0x1, 0x3, 0x5}, 0x40) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:28 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8953, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:28 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xa5f07b62, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x80000, 0xfffffffe) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:29 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:29 executing program 2: clock_gettime(0x0, &(0x7f0000005240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000100)=""/83, 0x53}], 0x3}, 0x5}, {{&(0x7f00000001c0)=@qipcrtr, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000400)=""/152, 0x98}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f0000000640)=""/231, 0xe7}], 0x7, &(0x7f00000007c0)=""/197, 0xc5}, 0x9}, {{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000000940)=""/171, 0xab}, {&(0x7f0000000a00)=""/248, 0xf8}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/130, 0x82}], 0x6}, 0x2}, {{&(0x7f0000003c40)=@alg, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/128, 0x80}, {&(0x7f0000004d40)=""/57, 0x39}, {&(0x7f0000004d80)=""/183, 0xb7}, {&(0x7f0000004e40)=""/86, 0x56}, {&(0x7f0000004ec0)=""/211, 0xd3}], 0x6, &(0x7f0000005040)=""/193, 0xc1}, 0x80000001}], 0x4, 0x100, &(0x7f0000005280)={r0, r1+60000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:29 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:29 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8935, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:29 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8941, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:29 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8982, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000a40)={0x0, @multicast2, @dev}, &(0x7f0000000a80)=0xc) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6, 0xf7, 0x6, 0x28, r1, 0x3f, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2}, 0x40) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:29 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000080)="eda201129337f2f68d1ab5769a3934eae9edfc5860d8703f1eee08a7423263838268c5df3b4df9e4d003", &(0x7f00000000c0)=""/73, &(0x7f0000000140)="824f6b99a505265fb4a4e36e387050eb77aefc304728805ace0a20a471838055a6720c001fb381d513ea4470ae1d6eb7f52607e52392355437acf709c73371648177ced48f24d2add0e78e1028b1b2289200ed1bca6bb2d2e5a2c658a1ceec177eaff4739db84e99117a0701fa4395d07cf6ee52b179750ca70b4ecd", &(0x7f00000002c0)="8688848684a5936925bcce9be3ff8c8e3687fe0a02b7553e758fd9424589dc349d060636eabca5e627d094cfff0892cde0411a5a0c0f74b645c9fbebed7511016290c5fbb4cb3afaf256f2913333851e645c1bcfc3e219cdcc48578dc53124e17f2e0da6ca8d90816dd578fa1225c762b97bd0972de04a73473f7b07bfb8c073f90683a05fbd1a0b46951d69fc50f09dc48f8ff8ceedc88499af7cb276864e6602d87d947ee288896fff37a4488fc55c7f1828a72df6f595b0bf3efb13e43dc8bdd45b0ee243231a2f58178907509c7de7f70f7c6d4eca8f5d6e3bcb3c8316eb08c0762628f53543ecc4d61fa64bf9cd08deaf", 0x0, 0x1, 0x4}, 0x38) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000240), 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='syzTnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000880000000ff0000000008471d00dc0064000005299078ac1414bb7f00000189175cac1414aaac1e0001ac1414aae0000002ac1414279404010044343743000000000000ea69000000000000000000000000fffffffbe00000010000c3f7ac1414bb00000009ac1e0001000000050727d50a010101e0000001ac1414bb640101027f000001ac1414bbe0000002e0000001ac1414aa4424bd70000000070000000100007fff000000090000000300000800000004000000000344082ff0000000064418ce40000007ff00000009000000060000000000004af1440e4516fa28087e412438e07474"]}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xce, 0xce, 0x9, [@typedef={0xd, 0x0, 0x0, 0x8, 0x3}, @union={0xf, 0x3, 0x0, 0x5, 0x1, 0x7, [{0x7, 0x2, 0x2}, {0x7, 0x0, 0x997}, {0x5, 0x2, 0x1}]}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @enum={0x2, 0x6, 0x0, 0x6, 0x4, [{0xd, 0x7ff}, {0xf, 0x7}, {0x3, 0x1}, {0x6, 0x6}, {0x8, 0x1}, {0x6, 0x4}]}, @ptr={0x7, 0x0, 0x0, 0x2, 0x5}, @func={0x9, 0x0, 0x0, 0xc, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x5}, @datasec={0x5, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x9, 0x4}], '@\a'}, @const={0x9, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30, 0x30, 0x61, 0x0, 0x2e, 0x2e, 0x30]}}, &(0x7f00000006c0)=""/32, 0xf1, 0x20}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xa, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0xc, 0xb, 0xb, 0x2, 0x8}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x27a7c163}, @call={0x85, 0x0, 0x0, 0x4b}]}, &(0x7f0000000540)='syzkaller\x00', 0x4fc, 0x23, &(0x7f0000000580)=""/35, 0x40f00, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xa, 0x100, 0x5}, 0x10, 0x0, r1}, 0x78) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, @null, @rose={'rose', 0x0}, 0x7, 'syz0\x00', @default, 0x2, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 12:42:30 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8955, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:30 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xfffff000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:30 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x46}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0x20000000ff, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:31 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, 0x1}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:31 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8907, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:31 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x894c, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:31 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8983, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:31 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000a00aac86e6574656d000072a600e6ffffff00cabc9c3ab19c064c34a13fce294a5d3f61520eeffe1782e84a8dbe170b38c8c0209d17c2910fb6be507dd969109295d5f5c6acca0e7c512b528f5d0fd6664954"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000a80d00000000000007000000ad440200010000001800000004000000000000000100010085000000530000001fba060004000000cd781000ffffffff9500000000000000"], &(0x7f0000000080)='GPL\x00', 0xff, 0x64, &(0x7f00000000c0)=""/100, 0x41100, 0x1, '\x00', r2, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xd, 0x40, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet(r3, &(0x7f0000000880)={&(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)="21433a0656d3c2c2c3e4876b6f3babb1e969944d7e1fd77de24cb076f1923489492b7ef7f73086b3b235e98188f543904c131ba96f05f3d76fb48df19e6fc238e049b4dfdcb7103b0a3de30cc4d36253a1e0f27ba19c57b22af03f1662c115314d06a2876e52985a148a1be9b02f7dc0d6193e3142918870cb2ea7a6b8e1c7c16d5b8072502c411edf62cea96130bd73d4d107b14d43694a3a141fe2bf6afc837b414eb2e0d07a0a427a5992b46ad016a2abd916e2661f34ead67f50b0aab78365ff54d23f9f25", 0xc7}, {&(0x7f0000000400)="0811491bdb67068198b71042c2d97e74727c477c25a0fc96d744531454ea962635823ce6d34553b1c3c9d3350dda0a0f5127f6e4a03ecd45d5b675f23233c9e1c0", 0x41}, {&(0x7f0000000480)="8ff0544f8d912bf3393d3eb10a86b6e7afe391b6c58fb6d4a2fa7eacdcbe71da7714ce5b1b7a4888ae72d5b7c92d10de6a075f99e3677a3c35f0be103d090a2ac3dde8ffd011b361394c6c62152508409a1fdb5007f2e041d2b6f9bd6e0915f2f52fbcec4c8c4efaec54789df216e48bf2b66e1a23acd1b802c4b9973d6a52e08546c92ee69fec4ac1ef65f6cc8fb904fc4ff9dacbb57524f88075c2f9d35070b9b80c56f509ce971c5c0cf2f4dd534b8d58249f1a38a6068ad174dab7ea", 0xbe}, {&(0x7f0000000540)="e1315c827db14a2f04b5277aa8e30704544ff1d63a981919fbcb3a0db42fbd2909caf663a53750c36a79ff111ea7fafbd3bb939cab0510d767274bf40193c9240a4ee2aca1ba2554441071d82c32ae5408ade51ee0a8ddbc4895f1340c6e9b5a3924c329528bf8a929fde4b81c708100fc1ef033fec2c66a1c4a5c038864290e5e0568cec81a509a3bda9e5bfb", 0x8d}, {&(0x7f0000000600)="e521230626e47624fc31f4cd8561b3f18388709e8511b7beb502aa33609b497b3e5a3be443bdd5ad9f89611f7a0c271c3ec989c393b1c59072794688dbda151966907d0ec357fd86cb2d480390631b579d2fec566c51cdd62370b5d85c9565a106beaede645b66f231e727dca40dd10c647163d05dc92f7655ff1b8070cc7d20fa3db1cfd3aaf3690e6783d1dbd9a07bd82657a2247d01645410ea1ccc1e2c41a44a18a94475b25b05e4d292c68878109d7e94aa7e122445c13ea79ba4ab4a4c8a0aa2b5eb41df0aa286198321470e155a89459c2f236bb73abc086d7c88933b56d0fc077d66e0e33f4f3366f50344c654", 0xf1}], 0x5, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x80, 0x0, 0x7, {[@cipso={0x86, 0x30, 0x2, [{0x1, 0xd, "631d9a7a1cba74a44634af"}, {0x7, 0x10, "3c7a846c1196823a4e005559b4b1"}, {0x5, 0x6, "5e4a9a76"}, {0x7, 0x7, "538f2f5877"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0x41, [@dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2, @loopback, @rand_addr=0x64010102, @loopback]}, @generic={0x82, 0x7, '\v;-_H'}, @timestamp={0x44, 0x8, 0xcc, 0x0, 0x4, [0x1000]}, @timestamp={0x44, 0x10, 0x14, 0x0, 0xf, [0x1ef, 0x3, 0x5]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0xb0}, 0x4048814) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000008c0)={r3}) sendmsg$kcm(r1, &(0x7f0000001f00)={&(0x7f0000000980)=@rc={0x1f, @none, 0x5}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a00)="59dbf35867d634e5a6760b8f692390edddb13446f78213246b877338498e7ce6fcc8cfbfc281c3a38dbbf0ee6cd9867b143f5a37cac9ef99d74ef8020ce745cced544be84c3e51044228c168a63e6c76761860e86ab8546836e7a9b9a337101708c476a636731f61095e5ee51f9af28eee6652d2dfdea4fcdaa57ddfcec3f68fd47dbdb71f7a42990df6967ffcf2f5d41d665ecf24336a2fb660ca5aa07f4c439bdc9b07a42489bcef85fd36ac91776d9197dac97b56e71ef67816f1292f2e30d127da87009c951692c99fe25ccd776f5cc448610f1b1a58743cbeb973b318", 0xdf}, {&(0x7f0000000b00)="0ebbe0690697c882b3c9c6102251c160d07c5b1c1bb74c", 0x17}, {&(0x7f0000000b40)="31422de3880f001ded8fbd5ff3d4a94793abb42e635248f8c0437a0f04e9315814cd402b68fa6ca8ea3db7c2d99da191ecac3db8618034e15644bb12a3e215a5a0a93b65e4b97a6d961463664e031a644a8f3d985b1dadc217c817fef481f8a81ef5c022c6091efedb6b1d", 0x6b}, {&(0x7f0000000bc0)="0c3a0396665285139573e16a625540400c8268f07ad24ddcb5dd673dd2af370704c59a3891d0cd94adbd3f9af9d8a8b00d62732ce0325bf1b7b1930f5b8f81727d363d6f84805626bc71f719d77bc807cf74b886a7812bfed4b2aec95228406e54a801902707e1b739f15835d92fe4e34e3cd8156a6d01aec8818e8d03a777db722f9e337d1a71bf41591e45b66717fdcaf0304985ed0d5e9a821962694f598caf31b68f828e3596fffe356f7707edb2ecb5805c6bd4cb7a15da077602ca8cde5341eaaaa236f215c57b253b69095237ac77f7350020004aa0fb2c11891fb22f30198350cb5562bee0b57c134e31dbc6f650ecdd6f97744f", 0xf8}], 0x4, &(0x7f0000000d00)=[{0xe8, 0x10e, 0x400, "fa4f1581ee90893c6b3156c97f7d621b55d358f5a50df011312e795cee6b8f12a7147fa656d7aafe2f0a11acdf057f25197df9fc909e3b016a18b4a0dfa3564abbd92169e87892772a2b216d4d868c45cccdf2e4177be1da27edef0eab1596e87ed1b39152c52ccebd4e236bf81ffb859e6e586b9bcee7267a634b2ecdea87d4607dedb4f9bdb907413613aeea7619f60dc7e57ea802a5ed14347782a7b61784e82715d9008060c86f7dd860e4bf53b5101dff9bca860ad08d954883f7ccc89814dc25f621ce76064b97c6f40359fa4d00d0a6e4"}, {0x1010, 0x6, 0x7, "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"}, {0x78, 0x10c, 0x8000, "cb61fab2fde533697c78ecf6d73098ad2b9e25b4171046ac13a1f167620e084ebaf44a8899bfeb7c89561c9185445df87a114560510b84da85a0389bbe0767a826a988a513776da51339ebffd90db49d92c308004ffc8882dacab60ee71350a354"}, {0x68, 0x118, 0x7fff, "823d81e003d4e006ad569f280ff249bfdf7e6539d7427fbc7d3c98e341121d0d41305e3c5dd27fbbf263965f1870e22fc9476235b6e819255a79a58c6253db9cd381ca04bedfb1785ec539bf4ae296db4762"}], 0x11d8}, 0x4014) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = socket(0x9, 0x800, 0x1) r4 = openat$cgroup_pressure(r2, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000200)={r5}) sendto$phonet(r3, &(0x7f0000000380)="ed27a97d466fa7561eb49a95319fc3a7f88eab9b102dfb0d919f2b8580c69d672c864587263c71c80e227d18d284a20bf2daaaa37c47d174f39e3010ae02b393ed4ff60aa5818a9a8aa990111b11c6522e586bc435545e4fcd9d5ddc7ffe2d8d98cc529396f62a05cf76360b90a072721f899e6dfdec35de90e1a2d88227ecee9c4dbe247dea4e4fb597f84b012fc02f35eea8d4ffc3f403da557395d9b7127456b65fb1944012b79c21b392dc0c29dc51ae883af60571f98e56f822aea5c67f739f41d44fa21a7618eeafdde08e1fb3cae220770b71a8e1dc045a5118949ee45f5a8a7c8186cc350f7b6539f5", 0xed, 0x4081, &(0x7f0000000480)={0x23, 0x1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)="e48c28e8f92ed875faa09aff8ea4bf149a70f10ab1c0bd303cc4cfa292c10a8dece6018f128cf04ad813529e1404376cd4c532f002a719cbe43b20d7915fe33ce620d012f3c6cf9aed1cc8745d8bd6c055fef29273540914f9826d288a8e6ce1f98b66a0eabd8439e10912da35ad8f150b0478db93161a6c48ce5b440daddf21f96931ddf16f756a3a6a2a6921ae252fc5c61cf2716b02f5c76825ca44b1", &(0x7f00000000c0)=@udp6=r1, 0x1}, 0x20) r6 = socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000006c0)="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", 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xf2, 0x8e, &(0x7f00000004c0)="4811748b96e06a21017ba366ea4af60b284241a27d07b081a7f648db4a4e0bfbb3d155d85381af9da78524377fbe6ccae96c7941fdad5ee82ee60cdf663c396864c9b384e05369e7b47839f5417aa1351725dfdb264c880f9988806397006497a22c1cf1dc6dfc9dc104b817f5f733b13abb3e2b8eded1aea6bdb5e9be408aa7e62e68a952f4c1d3f581fa886211f236fe657ff1313891a1133281590572e13f1ccc2057d9e0cca4614d08d12dd7dbf45299ed33d142fea25536bbe2a785dbdc9fb2e02849f9906b794f14f0effb65cce7804f2bd54689de540fe5e5a6bcdede26d0b38f52b35b1db82ab1c974412edf0147", &(0x7f00000002c0)=""/142, 0x8, 0x0, 0x5, 0x1f, &(0x7f00000005c0)="3e113aa0a9", &(0x7f0000000600)="496dea49951fdcdde42293a162bd45bb07f711219122ca5577434f5e164d8f", 0x1, 0x1}, 0x48) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:32 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8941, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:32 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x40, 0xfffffffe, 0x8d}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000200)={@broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1a}}, 0xc) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r5, 0xb05, 0x0, 0x0, {{0x6b}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r5, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000094}, 0x8801) 12:42:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'batadv_slave_0\x00', {0x2, 0x0, @broadcast}}) recvmsg(r0, &(0x7f0000003780)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000003600)=[{&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/234, 0xea}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/172, 0xac}, {&(0x7f0000002380)=""/134, 0x86}, {&(0x7f0000002440)=""/172, 0xac}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/214, 0xd6}], 0xa, &(0x7f00000036c0)=""/152, 0x98}, 0x21) 12:42:33 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:33 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8941, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:33 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8953, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:33 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:33 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a0, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:34 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x2, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000003c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83"], 0x4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x3f, 0xfff, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x1, 0x10, 0x2, 0x2e545202}}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040094) 12:42:34 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x3, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:34 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x894c, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x800000}, 0x40) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1, 0xb, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x5a}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9ea, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map={0x18, 0x4, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000240)='GPL\x00', 0x20, 0x1000, &(0x7f00000002c0)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001300)={0x4, 0x5, 0x0, 0x7fff}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x15, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x8b}, @generic={0x3, 0x9, 0x6, 0x4, 0x9}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x8000, 0x17, &(0x7f00000000c0)=""/23, 0x40f00, 0x4, '\x00', 0x0, 0xb, r1, 0x8, &(0x7f0000000140)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x1, 0xffff, 0x101}, 0x10, 0xffffffffffffffff, r2}, 0x78) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1, 0x800, 0xffff, 0x6, 0x8, r0, 0x9, '\x00', 0x0, r4, 0x3, 0x4, 0x3}, 0x40) 12:42:34 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x4, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 12:42:35 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:35 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x4, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:35 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8955, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)="5090683514057e4209c3ce645b3d6666cae417aa8da1ffcc7f16b8765c66ca9d7e00208d0011391bc6203db4cf27fd9f0e1e3fba229f857f90a2630cf53323df3c97a50ed83852342fa3b8e7f75e79762704455c7a7fb6847a0d4722b22a24d5651b69d183df08c7249d6c04d8c401c7d80fff248de32b97305734cd01b8c9776c4d7ec85f0adce507caae6b5bddeaf7d4ed9ff34778060d68b0bf27c8cd13b8f2f4a75d90eab312b08d3a13458d6430d59ae457381c4abf", &(0x7f00000000c0)=@tcp6=r0, 0x1}, 0x20) recvmmsg(r1, &(0x7f00000069c0)=[{{&(0x7f0000000180)=@sco={0x1f, @none}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002300)=""/67, 0x43}}, {{&(0x7f0000002380)=@nl=@unspec, 0x80, &(0x7f0000002640)=[{&(0x7f0000002400)=""/143, 0x8f}, {&(0x7f00000024c0)=""/138, 0x8a}, {&(0x7f0000002580)=""/12, 0xc}, {&(0x7f00000025c0)=""/115, 0x73}], 0x4}, 0x9}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002680)=""/11, 0xb}, {&(0x7f00000026c0)=""/165, 0xa5}, {&(0x7f0000002780)=""/239, 0xef}, {&(0x7f0000002880)=""/65, 0x41}, {&(0x7f0000002900)=""/63, 0x3f}, {&(0x7f0000002940)=""/105, 0x69}], 0x6, &(0x7f0000002a40)=""/212, 0xd4}, 0x4}, {{&(0x7f0000002b40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002bc0)=""/76, 0x4c}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x2, &(0x7f0000006bc0)=""/118, 0x76}}, {{&(0x7f0000003d00)=@qipcrtr, 0x80, &(0x7f0000004e80)=[{&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/230, 0xe6}], 0x2, &(0x7f0000004ec0)=""/142, 0x8e}, 0xffff}, {{&(0x7f0000004f80)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005000)=""/58, 0x3a}, {&(0x7f0000005040)=""/139, 0x8b}, {&(0x7f0000005100)=""/207, 0xcf}, {&(0x7f0000005200)=""/26, 0x1a}, {&(0x7f0000003c80)=""/14, 0xe}, {&(0x7f0000005280)=""/35, 0x23}, {&(0x7f00000052c0)=""/254, 0xfe}], 0x7, &(0x7f0000005440)=""/47, 0x2f}, 0x2}, {{&(0x7f0000005480)=@llc, 0x80, &(0x7f0000006840)=[{&(0x7f0000005500)=""/60, 0x3c}, {&(0x7f0000005540)=""/144, 0x90}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/55, 0x37}, {&(0x7f0000006640)=""/153, 0x99}, {&(0x7f0000006700)=""/224, 0xe0}, {&(0x7f0000006800)}], 0x7, &(0x7f00000068c0)=""/244, 0xf4}}], 0x7, 0x22, &(0x7f0000006b80)) 12:42:35 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:35 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x8, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:35 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a0, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(r1, &(0x7f0000000000)=""/79, 0x4f, 0x2001, &(0x7f0000000080)=@caif, 0x80) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000600)={0x0, {{0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=""/167, 0x52, 0xa7, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x3, 0x81, 0x4, 0x8, 0x1a0, r0, 0x3, '\x00', r4, r5, 0x1, 0x4, 0x3}, 0x40) r6 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000000400)={&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f00000001c0)=""/150, 0x96}, {&(0x7f00000002c0)=""/90, 0x5a}], 0x3, &(0x7f0000000380)=""/109, 0x6d}, 0x2) 12:42:36 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:36 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x9, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc4}, [@jmp={0x5, 0x0, 0x0, 0xb, 0xb, 0xffffffffffffffc0, 0xffffffffffffffff}, @func, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @generic={0x20, 0x4, 0x6, 0xb8, 0x8001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x11, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x8, 0xfffffffc, 0x2}, 0x10}, 0x78) [ 490.830523][T23460] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:37 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xa, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:37 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89e1, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0xfffffffd}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:37 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x895d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:37 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(r1, &(0x7f0000000000)=""/79, 0x4f, 0x2001, &(0x7f0000000080)=@caif, 0x80) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000600)={0x0, {{0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=""/167, 0x52, 0xa7, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x3, 0x81, 0x4, 0x8, 0x1a0, r0, 0x3, '\x00', r4, r5, 0x1, 0x4, 0x3}, 0x40) r6 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000000400)={&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f00000001c0)=""/150, 0x96}, {&(0x7f00000002c0)=""/90, 0x5a}], 0x3, &(0x7f0000000380)=""/109, 0x6d}, 0x2) 12:42:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xc, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:38 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8906, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x5c, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 12:42:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xe, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000)="af12f49d79650a2c8767eb88a11f604ed55b18da5cf9c96d4433c82441b1de160b8a8a4b0bc31cfa4ea41cff3692feab1185e6f6398aaf2ed44b1a1f75ef2cd67885569a7fce1b2be02a4c2f4d67425b1e70315442030e37408cc9661c2fc699b408c1a826e9adb15969062a019d0063b1d053a52a102b6951341d25b82cbb9668b6dcdd732e0d35e276ba90cf68ef782910e9ca28d03b4d8dacf92e8c3acb98424137e578c6981ba45440920413fbfca4446a6c7ff28337378e0d26e654d997c9c4892d376fe87d75e6d3940ff7e3c8e3b3d537abc2c0436d94", &(0x7f0000000100)=@tcp6, 0x4}, 0x20) 12:42:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:38 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8903, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:38 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89e4, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:39 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8982, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x10, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:39 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89e1, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x1002}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x3, &(0x7f0000000000)=@raw=[@map={0x18, 0x7, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0x9, 0x2, 0x1, 0x18, 0x8}], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x44, &(0x7f0000000080)=""/68, 0x40f00, 0x10, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000140)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x4, 0x2, 0x3f}, 0x10, 0x0, r3}, 0x78) 12:42:40 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x60, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:40 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:40 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400448c9, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 494.561198][T23699] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:42:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x3, &(0x7f0000000000)=@raw=[@generic={0xf8, 0x3, 0x2, 0x3c6, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}], &(0x7f0000000040)='GPL\x00', 0x18, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0x4, 0x342, 0x1}, 0x10, 0xffffffffffffffff}, 0x78) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=r0, r2, 0x8}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:41 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, 0x0) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 495.283489][T23716] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:42:41 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:41 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8983, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x111}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1c, 0xba, 0x6, 0x1, 0x400, r0, 0x9, '\x00', r2, 0xffffffffffffffff, 0x2}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x80, 0xcd2ad4e2d1c1816d}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f0000000000), 0x248800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f00000002c0)="332005a2a1c011c9e12995c9a2f28fa0f24f5f81d2f62bf77a1dda68af81ab3a0ef66794cab503b4a6c70791499d1c9f837b43eeba2724d90674a13470de1fc4074f238c6b0e1369b85899babb681f2fa4032a9339fe", &(0x7f0000000340)=@tcp6=r5, 0x1}, 0x20) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @dev}, &(0x7f0000000040)=0xc) 12:42:41 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8982, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:42 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8982, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:42 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x300, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000900314e6fe6ad44b2ab8f0000000000cf4432cbd2b1876a657be416000002000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x19, '\x00', r2, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0xb, 0x6, 0xa09}, 0x10, 0xffffffffffffffff}, 0x78) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f0000000000), 0x248800) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0xe, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6e9a, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @alu={0x7, 0x0, 0xc, 0x3, 0x0, 0xfffffffffffffff4, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x1, 0x2, 0x5, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x654c, 0x0, 0x0, 0x0, 0x200}, @generic={0x19, 0x0, 0x5, 0x8001, 0x6}, @ldst={0x2, 0x1, 0x6, 0x3, 0xa, 0xffffffffffffffc0, 0xfffffffffffffff0}, @ldst={0x0, 0x3, 0x6, 0x2, 0x9, 0xfffffffffffffff0, 0xfffffffffffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x2, &(0x7f00000002c0)=""/2, 0x41000, 0xf, '\x00', r4, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xe, 0x7, 0x3}, 0x10, 0x0, r5}, 0x78) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x5}, 0x40) socket$inet(0x2, 0x4, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth1\x00', {0x2, 0x0, @broadcast}}) 12:42:46 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400448dd, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:46 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x600, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x20000, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x200, '\x00', 0x0, r0}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000900314e6fe6ad44b2ab8f0000000000cf4432cbd2b1876a657be416000002000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x19, '\x00', r2, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0xb, 0x6, 0xa09}, 0x10, 0xffffffffffffffff}, 0x78) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f0000000000), 0x248800) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0xe, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6e9a, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @alu={0x7, 0x0, 0xc, 0x3, 0x0, 0xfffffffffffffff4, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x1, 0x2, 0x5, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x654c, 0x0, 0x0, 0x0, 0x200}, @generic={0x19, 0x0, 0x5, 0x8001, 0x6}, @ldst={0x2, 0x1, 0x6, 0x3, 0xa, 0xffffffffffffffc0, 0xfffffffffffffff0}, @ldst={0x0, 0x3, 0x6, 0x2, 0x9, 0xfffffffffffffff0, 0xfffffffffffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x2, &(0x7f00000002c0)=""/2, 0x41000, 0xf, '\x00', r4, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xe, 0x7, 0x3}, 0x10, 0x0, r5}, 0x78) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:47 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a0, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a0, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:47 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400448c9, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:47 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r0, @ANYBLOB="ff83"], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000d0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:47 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x900, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, 0x0) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:47 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, 0x0) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:47 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xa00, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 501.163138][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.169514][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 12:42:47 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400454ca, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 501.371568][T23987] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 501.500201][T23999] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 12:42:48 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xc00, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:48 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000400)) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:48 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xe00, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 502.702272][T24041] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 12:42:49 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:49 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5460, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:49 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf00, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:49 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40049409, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:49 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:49 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a0, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:49 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x5865, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:50 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000000000000000"], 0x1c}}, 0x0) 12:42:50 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:51 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6558, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:51 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x8100, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:51 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40086602, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:51 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89f2, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:51 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40049409, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:52 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:52 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40049409, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:52 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000000000000000"], 0x1c}}, 0x0) 12:42:52 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x34000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:53 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x400300, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:53 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf0ffff, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:53 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40186366, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:53 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89f4, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:54 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x1000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:54 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40086602, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:54 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40086602, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:54 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5450, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:54 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x2000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:55 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x401c5820, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:55 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x3000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:56 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000"], 0x1c}}, 0x0) 12:42:56 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8a", 0x6d}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:56 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8a", 0x6d}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:56 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x4000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 510.340443][T24516] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 510.362309][T24513] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 12:42:59 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400448c9, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:59 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x4020940d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:59 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:42:59 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8a", 0x6d}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:42:59 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x401c5820, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:42:59 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000"], 0x1c}}, 0x0) [ 513.635331][T24589] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:43:00 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:00 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x9000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:00 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89f4, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:01 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xa000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:01 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xc000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:01 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8a", 0x6d}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 515.456041][T24729] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 12:43:02 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400448dd, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:02 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:02 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40286608, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:02 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xe000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:02 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:02 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400448c9, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:02 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x10000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:03 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x4020940d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x60000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x627bf0a5, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:04 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x541b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x65580000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:04 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x400454ca, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:04 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40305828, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x81000000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:04 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40286608, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:05 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:05 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x541b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:05 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:05 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xa5f07b62, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:06 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80086301, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:06 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40305828, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:06 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40049409, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:07 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001000000"], 0x1c}}, 0x0) 12:43:07 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xfffff000, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:07 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x4c01, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:07 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:08 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80086601, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:08 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:08 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80086301, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:08 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40086602, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:08 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:09 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596", 0x69}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:43:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596", 0x69}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:43:09 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 523.310350][T25257] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 523.461777][T25261] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 12:43:09 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8010661b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:10 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x10, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:10 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x10, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:10 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fb", 0x62}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:43:10 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40186366, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:10 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x2, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 524.698221][T25290] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:12 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x3, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:12 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fb", 0x62}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) [ 526.162487][T25426] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:12 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x401c5820, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:12 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x10, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:13 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x40186366, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:13 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x2, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:13 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108906, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:13 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x4, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:14 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x6, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:15 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x10, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:15 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x4, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:15 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x8, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:15 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x4, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:15 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x3, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:18 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x4020940d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:18 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108907, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fb", 0x62}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:43:18 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x9, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) (fail_nth: 1) 12:43:18 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) (fail_nth: 1) [ 532.665032][T25640] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 532.741813][T25639] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:43:19 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0xa, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 532.819696][T25664] FAULT_INJECTION: forcing a failure. [ 532.819696][T25664] name failslab, interval 1, probability 0, space 0, times 0 [ 532.935630][T25664] CPU: 0 PID: 25664 Comm: syz-executor.1 Not tainted 5.16.0-rc2-syzkaller #0 [ 532.944619][T25664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.954792][T25664] Call Trace: [ 532.958089][T25664] [ 532.961126][T25664] dump_stack_lvl+0xcd/0x134 [ 532.965755][T25664] should_fail.cold+0x5/0xa [ 532.970528][T25664] ? getname_flags.part.0+0x50/0x4f0 [ 532.975852][T25664] should_failslab+0x5/0x10 [ 532.980422][T25664] kmem_cache_alloc+0x5e/0x3a0 [ 532.985227][T25664] getname_flags.part.0+0x50/0x4f0 [ 532.990380][T25664] getname+0x8e/0xd0 [ 532.994309][T25664] do_sys_openat2+0xf5/0x4d0 [ 532.999033][T25664] ? build_open_flags+0x6f0/0x6f0 [ 533.004106][T25664] ? __context_tracking_exit+0xb8/0xe0 [ 533.009605][T25664] ? lock_downgrade+0x6e0/0x6e0 [ 533.014511][T25664] __x64_sys_openat+0x13f/0x1f0 [ 533.019405][T25664] ? __ia32_sys_open+0x1c0/0x1c0 [ 533.024566][T25664] ? syscall_enter_from_user_mode+0x21/0x70 [ 533.030510][T25664] do_syscall_64+0x35/0xb0 [ 533.035081][T25664] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 533.041093][T25664] RIP: 0033:0x7f370ad36ae9 [ 533.045619][T25664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 533.065285][T25664] RSP: 002b:00007f370828b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.073725][T25664] RAX: ffffffffffffffda RBX: 00007f370ae4a020 RCX: 00007f370ad36ae9 [ 533.081718][T25664] RDX: 000000000000275a RSI: 0000000020000280 RDI: ffffffffffffff9c [ 533.089713][T25664] RBP: 00007f370828b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 533.098135][T25664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.106123][T25664] R13: 00007ffedebb048f R14: 00007f370828b300 R15: 0000000000022000 [ 533.114134][T25664] 12:43:19 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) 12:43:19 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0xc, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:20 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dbfffd}) write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xf3c8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x4, 0x200040, 0x6}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) write$cgroup_int(r4, &(0x7f00000000c0)=0x80, 0x12) write$cgroup_type(r3, &(0x7f0000000000), 0xb1d000) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) getsockopt$ax25_int(r5, 0x101, 0x0, 0x0, &(0x7f0000000140)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) [ 533.766019][T25719] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:20 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0xe, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 534.038521][ T26] audit: type=1804 audit(1638449000.416:21): pid=25727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir058648645/syzkaller.9S8I5w/178/memory.events" dev="sda1" ino=13889 res=1 errno=0 [ 534.045472][T25638] FAULT_INJECTION: forcing a failure. [ 534.045472][T25638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.213130][T25638] CPU: 0 PID: 25638 Comm: syz-executor.2 Not tainted 5.16.0-rc2-syzkaller #0 [ 534.221931][T25638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.232008][T25638] Call Trace: [ 534.235298][T25638] [ 534.238242][T25638] dump_stack_lvl+0xcd/0x134 [ 534.242864][T25638] should_fail.cold+0x5/0xa [ 534.247402][T25638] _copy_from_user+0x2c/0x180 [ 534.252108][T25638] __copy_msghdr_from_user+0x91/0x4b0 [ 534.257511][T25638] ? __ia32_sys_shutdown+0x70/0x70 [ 534.262645][T25638] ? mark_lock+0xef/0x17b0 [ 534.267085][T25638] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 534.273100][T25638] sendmsg_copy_msghdr+0xa1/0x160 [ 534.278148][T25638] ? do_recvmmsg+0x6d0/0x6d0 [ 534.282767][T25638] ? lock_chain_count+0x20/0x20 [ 534.287646][T25638] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 534.293668][T25638] ___sys_sendmsg+0xc6/0x170 [ 534.298506][T25638] ? sendmsg_copy_msghdr+0x160/0x160 [ 534.303812][T25638] ? __fget_files+0x21b/0x3e0 [ 534.308500][T25638] ? lock_downgrade+0x6e0/0x6e0 [ 534.313458][T25638] ? __fget_files+0x23d/0x3e0 [ 534.318150][T25638] ? __fget_light+0xea/0x280 [ 534.322752][T25638] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 534.329008][T25638] __sys_sendmsg+0xe5/0x1b0 [ 534.333528][T25638] ? __sys_sendmsg_sock+0x30/0x30 [ 534.338563][T25638] ? syscall_enter_from_user_mode+0x21/0x70 [ 534.344491][T25638] do_syscall_64+0x35/0xb0 [ 534.348910][T25638] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 534.354813][T25638] RIP: 0033:0x7fd2c8624ae9 [ 534.359224][T25638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.378838][T25638] RSP: 002b:00007fd2c5b9a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.387253][T25638] RAX: ffffffffffffffda RBX: 00007fd2c8737f60 RCX: 00007fd2c8624ae9 [ 534.395234][T25638] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 534.403197][T25638] RBP: 00007fd2c5b9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.411159][T25638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.419120][T25638] R13: 00007ffe97a194bf R14: 00007fd2c5b9a300 R15: 0000000000022000 [ 534.427102][T25638] 12:43:21 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0xf, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 534.908375][ T26] audit: type=1804 audit(1638449001.286:22): pid=25735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir058648645/syzkaller.9S8I5w/178/memory.events" dev="sda1" ino=13889 res=1 errno=0 12:43:21 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5000943a, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:21 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x801c581f, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:21 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:21 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0xf, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:21 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x2) [ 535.064366][ T26] audit: type=1804 audit(1638449001.286:23): pid=25727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir058648645/syzkaller.9S8I5w/178/memory.events" dev="sda1" ino=13889 res=1 errno=0 [ 535.222909][ T26] audit: type=1804 audit(1638449001.286:24): pid=25733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir058648645/syzkaller.9S8I5w/178/memory.events" dev="sda1" ino=13889 res=1 errno=0 [ 535.324315][T25767] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 535.452998][ T26] audit: type=1804 audit(1638449001.286:25): pid=25733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir058648645/syzkaller.9S8I5w/178/memory.events" dev="sda1" ino=13889 res=1 errno=0 12:43:22 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) 12:43:22 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x60, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:22 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108907, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:22 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x3) [ 536.482457][T25827] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:22 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:23 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80086301, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:23 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0045878, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x2, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x4) 12:43:24 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x3, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 537.756032][T25927] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:24 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x4, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:24 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) 12:43:24 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x5) 12:43:25 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x6, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:25 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5000943a, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 538.880175][T25967] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:25 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80086601, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:25 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x8, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:25 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0045878, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:26 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x6) 12:43:26 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x9, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 539.964292][T26053] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:26 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) 12:43:27 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0xa, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:27 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x8, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:27 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x7) [ 540.917763][T26087] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:27 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108906, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:27 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x5) 12:43:27 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0189436, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 541.738170][T26110] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:43:28 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x8) [ 542.105879][T26116] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:28 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0xc, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:28 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) 12:43:29 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) 12:43:29 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x9) 12:43:29 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0xe, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 543.397646][T26191] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:30 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0xf, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:30 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0xf) [ 544.396910][T26279] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:31 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) 12:43:35 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108907, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:35 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) 12:43:35 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x10, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:35 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x10) 12:43:35 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) 12:43:35 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc020660b, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 549.673424][T26346] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:36 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x60, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:36 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:36 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x18) 12:43:37 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x2, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 550.944805][T26446] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:37 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x10) 12:43:37 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 551.596731][T26457] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:43:38 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x801c581f, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:38 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xd000943d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:38 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x300) 12:43:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x4, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 552.095173][T26471] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:39 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x7, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) 12:43:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x6, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:39 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x4, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:39 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x500) 12:43:39 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0xc5e, 0x800, 0x7fff, 0x8d0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) unshare(0x50080) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r1, 0x200, 0x8000, 0x2}) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f00000001c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="b2cc61b11f2f753978937d934302c2b2dd937a71a1b8ff89536c52d01820b3d3190f2ab41a9b043f33de0d63c946dc14ae365d2c0a7f88e17c260327782dc8333e4634f909b2a2b33f2fbbf400bc096bf5e101ea74c8f97c704c57b574cb3c4648ac6a08aac3d26016493ddc5998b3ef9940e2126080b232145e4bc34e0b5fd6f85e4b5794d91814", &(0x7f0000000100)=@udp=r3, 0x1}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) unshare(0x4000200) 12:43:39 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xd000943d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:40 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x8, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 553.574862][T26535] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:40 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8040942d, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:40 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x600) 12:43:40 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x9, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 554.744715][T26635] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:41 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xa, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:41 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x801c581f, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:42 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) 12:43:42 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:42 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x700) 12:43:42 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket(0xf, 0x2, 0x5) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000a0001006e6574656d"], 0x7c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x74, 0x70, 0x100, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4c, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x800}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x2000c080) unshare(0x60060080) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 556.025781][T26685] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:42 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xe, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:42 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0045878, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) 12:43:43 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x900) [ 557.068024][T26753] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:43:43 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xf, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:44 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0xc5e, 0x800, 0x7fff, 0x8d0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) unshare(0x50080) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r1, 0x200, 0x8000, 0x2}) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f00000001c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="b2cc61b11f2f753978937d934302c2b2dd937a71a1b8ff89536c52d01820b3d3190f2ab41a9b043f33de0d63c946dc14ae365d2c0a7f88e17c260327782dc8333e4634f909b2a2b33f2fbbf400bc096bf5e101ea74c8f97c704c57b574cb3c4648ac6a08aac3d26016493ddc5998b3ef9940e2126080b232145e4bc34e0b5fd6f85e4b5794d91814", &(0x7f0000000100)=@udp=r3, 0x1}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) unshare(0x4000200) 12:43:44 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000100000000000000000002"], 0x1c}}, 0x0) 12:43:44 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0801000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000e8001680b80001800c0003000000000000000000100002000000000000000000000000000c000900000000000000000018000c801400010000000000000000000000000000000000280001000000000000000000000000000000000000000000000000000000000000000000000000000c000500000000000000000014000a00000000000000000000000000000000001000020006ffffff0000000000000000100006000000000000000000000000000c00070000000000000000002c0001802800010000000000bbbbbbbbbbbb00"/240], 0x108}}, 0x44) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000e80)={{r1}, 0x0, 0x26, @unused=[0xc97, 0x400, 0x5, 0x8000], @subvolid}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000e00)="eae3c20a9e61f40ec80d11f78768b95c6a868d3834dd580f48a7e94d43d5ffc7b0a0fe3c336da48c4b076be9a06f730c49bb913ead890b278a922876417589e7f04bcf258869fa7ff8d30438da6491f815bfe3676dff0363d237196aa556027959fbe8af2b633fc596b2bfff8ad5ed3f", 0x70}], 0x1) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000400)=0x80) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sendfile(r2, r2, 0x0, 0xdd3c) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0xf00) 12:43:44 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x10, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12:43:44 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0xc0045878, &(0x7f0000000280)={'erspan0\x00', {0x2, 0x0, @broadcast}}) [ 558.285683][T26810] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 558.393633][T26693] ================================================================== [ 558.402063][T26693] BUG: KASAN: user-memory-access in dst_release+0x26/0xe0 [ 558.409258][T26693] Write of size 4 at addr 0000000080000041 by task syz-executor.5/26693 [ 558.417580][T26693] [ 558.419896][T26693] CPU: 0 PID: 26693 Comm: syz-executor.5 Not tainted 5.16.0-rc2-syzkaller #0 [ 558.428674][T26693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.438745][T26693] Call Trace: [ 558.442029][T26693] [ 558.444956][T26693] dump_stack_lvl+0xcd/0x134 [ 558.449553][T26693] kasan_report.cold+0x66/0xdf [ 558.454378][T26693] ? dst_release+0x26/0xe0 [ 558.458801][T26693] kasan_check_range+0x13d/0x180 [ 558.463799][T26693] dst_release+0x26/0xe0 [ 558.468042][T26693] dst_cache_destroy+0xcb/0x190 [ 558.472965][T26693] sit_init_net+0x7d8/0xaa0 [ 558.477521][T26693] ? ipip6_tunnel_ctl+0x1040/0x1040 [ 558.482723][T26693] ops_init+0xaf/0x470 [ 558.486833][T26693] setup_net+0x40f/0xa30 [ 558.491078][T26693] ? down_read_killable+0x1a7/0x480 [ 558.496287][T26693] ? ops_init+0x470/0x470 [ 558.500624][T26693] ? rcu_read_lock_sched_held+0x3a/0x70 [ 558.506225][T26693] copy_net_ns+0x318/0x760 [ 558.510650][T26693] create_new_namespaces+0x3f6/0xb20 [ 558.515981][T26693] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 558.521615][T26693] ksys_unshare+0x445/0x920 [ 558.526168][T26693] ? unshare_fd+0x1c0/0x1c0 [ 558.530678][T26693] ? syscall_enter_from_user_mode+0x21/0x70 [ 558.536578][T26693] __x64_sys_unshare+0x2d/0x40 [ 558.541343][T26693] do_syscall_64+0x35/0xb0 [ 558.545850][T26693] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 558.551753][T26693] RIP: 0033:0x7fba77d61ae9 [ 558.556164][T26693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 558.575766][T26693] RSP: 002b:00007fba752b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 558.584179][T26693] RAX: ffffffffffffffda RBX: 00007fba77e75020 RCX: 00007fba77d61ae9 [ 558.592144][T26693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060060080 [ 558.600111][T26693] RBP: 00007fba77dbbf6d R08: 0000000000000000 R09: 0000000000000000 [ 558.608090][T26693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.616056][T26693] R13: 00007ffca2f957cf R14: 00007fba752b6300 R15: 0000000000022000 [ 558.624037][T26693] [ 558.627053][T26693] ================================================================== [ 558.635100][T26693] Disabling lock debugging due to kernel taint 12:43:45 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x60, r6}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02d9b5aed437e42b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 558.995103][T26693] Kernel panic - not syncing: panic_on_warn set ... [ 559.001807][T26693] CPU: 1 PID: 26693 Comm: syz-executor.5 Tainted: G B 5.16.0-rc2-syzkaller #0 [ 559.011977][T26693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.022043][T26693] Call Trace: [ 559.025326][T26693] [ 559.028266][T26693] dump_stack_lvl+0xcd/0x134 [ 559.032904][T26693] panic+0x2b0/0x6dd [ 559.036871][T26693] ? __warn_printk+0xf3/0xf3 [ 559.041475][T26693] ? preempt_schedule_common+0x59/0xc0 [ 559.046953][T26693] ? dst_release+0x26/0xe0 [ 559.051387][T26693] ? preempt_schedule_thunk+0x16/0x18 [ 559.058289][T26693] ? trace_hardirqs_on+0x38/0x1c0 [ 559.063409][T26693] ? trace_hardirqs_on+0x51/0x1c0 [ 559.068456][T26693] ? dst_release+0x26/0xe0 [ 559.073243][T26693] ? dst_release+0x26/0xe0 [ 559.077682][T26693] end_report.cold+0x63/0x6f [ 559.082296][T26693] kasan_report.cold+0x71/0xdf [ 559.087169][T26693] ? dst_release+0x26/0xe0 [ 559.091611][T26693] kasan_check_range+0x13d/0x180 [ 559.096582][T26693] dst_release+0x26/0xe0 [ 559.100842][T26693] dst_cache_destroy+0xcb/0x190 [ 559.105703][T26693] sit_init_net+0x7d8/0xaa0 [ 559.110206][T26693] ? ipip6_tunnel_ctl+0x1040/0x1040 [ 559.115405][T26693] ops_init+0xaf/0x470 [ 559.119472][T26693] setup_net+0x40f/0xa30 [ 559.123711][T26693] ? down_read_killable+0x1a7/0x480 [ 559.128919][T26693] ? ops_init+0x470/0x470 [ 559.133342][T26693] ? rcu_read_lock_sched_held+0x3a/0x70 [ 559.138893][T26693] copy_net_ns+0x318/0x760 [ 559.143327][T26693] create_new_namespaces+0x3f6/0xb20 [ 559.148613][T26693] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 559.154330][T26693] ksys_unshare+0x445/0x920 [ 559.158839][T26693] ? unshare_fd+0x1c0/0x1c0 [ 559.163356][T26693] ? syscall_enter_from_user_mode+0x21/0x70 [ 559.169252][T26693] __x64_sys_unshare+0x2d/0x40 [ 559.174099][T26693] do_syscall_64+0x35/0xb0 [ 559.178514][T26693] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 559.184409][T26693] RIP: 0033:0x7fba77d61ae9 [ 559.188819][T26693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 559.208510][T26693] RSP: 002b:00007fba752b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 559.216917][T26693] RAX: ffffffffffffffda RBX: 00007fba77e75020 RCX: 00007fba77d61ae9 [ 559.224894][T26693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060060080 [ 559.232872][T26693] RBP: 00007fba77dbbf6d R08: 0000000000000000 R09: 0000000000000000 [ 559.240835][T26693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.248799][T26693] R13: 00007ffca2f957cf R14: 00007fba752b6300 R15: 0000000000022000 [ 559.256776][T26693] [ 559.260023][T26693] Kernel Offset: disabled [ 559.264383][T26693] Rebooting in 86400 seconds..