Warning: Permanently added '10.128.0.162' (ECDSA) to the list of known hosts. 2020/07/17 23:37:30 fuzzer started 2020/07/17 23:37:30 dialing manager at 10.128.0.26:41463 2020/07/17 23:37:31 syscalls: 2944 2020/07/17 23:37:31 code coverage: enabled 2020/07/17 23:37:31 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2020/07/17 23:37:31 extra coverage: enabled 2020/07/17 23:37:31 setuid sandbox: enabled 2020/07/17 23:37:31 namespace sandbox: enabled 2020/07/17 23:37:31 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/17 23:37:31 fault injection: enabled 2020/07/17 23:37:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/17 23:37:31 net packet injection: enabled 2020/07/17 23:37:31 net device setup: enabled 2020/07/17 23:37:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/17 23:37:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/17 23:37:31 USB emulation: /dev/raw-gadget does not exist 23:40:18 executing program 0: pselect6(0x40, &(0x7f00000002c0), 0x0, 0xffffffffffffffff, 0x0, 0x0) syzkaller login: [ 313.339575][ T8464] IPVS: ftp: loaded support on port[0] = 21 [ 313.574564][ T8464] chnl_net:caif_netlink_parms(): no params data found [ 313.798689][ T8464] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.806915][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.816433][ T8464] device bridge_slave_0 entered promiscuous mode [ 313.863303][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.870562][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.880154][ T8464] device bridge_slave_1 entered promiscuous mode [ 313.956142][ T8464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.971045][ T8464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.035314][ T8464] team0: Port device team_slave_0 added [ 314.056673][ T8464] team0: Port device team_slave_1 added [ 314.113297][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.120354][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.146579][ T8464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.159929][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.167191][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.193295][ T8464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.399312][ T8464] device hsr_slave_0 entered promiscuous mode [ 314.433511][ T8464] device hsr_slave_1 entered promiscuous mode [ 314.879323][ T8464] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.923067][ T8464] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.965491][ T8464] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.070280][ T8464] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 315.334221][ T8464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.373485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.383421][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.412797][ T8464] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.442056][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.452312][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.462408][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.469633][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.525111][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 315.534503][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.544480][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.554525][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.561826][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.570741][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.581972][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.592893][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.603671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.614279][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.625057][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.635605][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.645655][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.661636][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.676256][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.686260][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.710884][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.771567][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.780332][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.807023][ T8464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.861123][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.872041][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.930299][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.940499][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.958650][ T8464] device veth0_vlan entered promiscuous mode [ 315.984452][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.993625][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.026754][ T8464] device veth1_vlan entered promiscuous mode [ 316.081343][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 316.091252][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 316.100997][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 316.111069][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 316.128898][ T8464] device veth0_macvtap entered promiscuous mode [ 316.147956][ T8464] device veth1_macvtap entered promiscuous mode [ 316.192520][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.200445][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.210995][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 316.220886][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 316.231085][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.256579][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.303347][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.314061][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:40:22 executing program 0: pselect6(0x40, &(0x7f00000002c0), 0x0, 0xffffffffffffffff, 0x0, 0x0) 23:40:22 executing program 0: pselect6(0x40, &(0x7f00000002c0), 0x0, 0xffffffffffffffff, 0x0, 0x0) 23:40:22 executing program 0: pselect6(0x40, &(0x7f00000002c0), 0x0, 0xffffffffffffffff, 0x0, 0x0) 23:40:22 executing program 0: r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 23:40:22 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) 23:40:23 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) 23:40:23 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) 23:40:23 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) 23:40:23 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x140, 0x0) unshare(0x2000400) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r0, 0x401) 23:40:24 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x140, 0x0) unshare(0x2000400) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r0, 0x401) 23:40:24 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x140, 0x0) unshare(0x2000400) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r0, 0x401) 23:40:24 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x140, 0x0) unshare(0x2000400) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r0, 0x401) 23:40:24 executing program 0: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x4, 0xffffffffffffffff, 0x0) [ 318.694329][ T8713] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 23:40:24 executing program 0: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x4, 0xffffffffffffffff, 0x0) 23:40:24 executing program 0: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x4, 0xffffffffffffffff, 0x0) 23:40:24 executing program 0: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x4, 0xffffffffffffffff, 0x0) 23:40:25 executing program 0: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0xd1, 0x0, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], r1}, 0x40) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}}}, 0x2e) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) dup(0xffffffffffffffff) 23:40:26 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14010000", @ANYRES16=r2, @ANYBLOB="040025bd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000800) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f00000003c0)) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT], 0x2c}, 0x1, 0x0, 0x0, 0x89}, 0x800) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)=0x0) tkill(r5, 0x2e) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3fffffff}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c010000ebb38e765571a05005158ca1e5d5f911408fbc303ec33c9ff42c74340369b3a4cd608d97197749e5761c41fd89060825cf00"/67, @ANYRES16=r2, @ANYBLOB="00032fbd7000ffdbdf25010000000800010050d3b1cd1c0004800500030005000000050003000000000005000300020000004400048005000300050000005400030001000000050003000500000005000300020000000500030001000000050003000100000005000300000000000500030001000000880008801400078008000500eeccb80108000600c10000000c0007800800050079bc3c19040007800c00078034000780080005005abfc16608000600e7000000080006006c00000008000600db0000000800050057941a3d080005005a61cc3d0c000780080005006bae7c6814000780080005003f75337a080005008ddd5a7d080001000200000008000200030000000800020001000000"], 0x11c}, 0x1, 0x0, 0x0, 0x580d4}, 0x40000) mlock(&(0x7f0000565000/0x2000)=nil, 0x2000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 23:40:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x1104, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x8840, &(0x7f0000000000)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) sched_getscheduler(0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000005c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x19, 0x8}, 0x0, 0x0, 0x81, 0x7, 0x2, 0x3, 0x4, 0x8001, 0x80, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r8}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r8}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', r8, 0x2f, 0x4, 0x0, 0x1, 0x20, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x8000, 0x10a5, 0x7c17}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r9, 0x2f, 0x8, 0x7, 0xc, 0x0, @ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7800, 0x1, 0x4}}) 23:40:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r0, 0x8000) r1 = socket$inet6(0xa, 0x5, 0x0) close(r1) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) splice(r1, &(0x7f0000000040)=0x101, r3, &(0x7f00000000c0)=0xffff, 0x40, 0x4) r4 = open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r4, 0x80184151, &(0x7f0000000100)={0x0, &(0x7f00000001c0)="70559c362cc85054ac9595540c301c9e95a1bac77562b9ef3cd8f45f43c5cc1c876c19b5791d62e6b76c03a11681a2d9b9a47a650fc3552fd73e88d4d8eec2348401c96aa786f5ac0d5819", 0x4b}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r1, r8, 0x0, 0x80001d00c0d0) [ 320.662019][ T33] audit: type=1800 audit(1595029226.627:2): pid=8741 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15719 res=0 [ 320.692545][ T33] audit: type=1800 audit(1595029226.657:3): pid=8741 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15721 res=0 23:40:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="680000001300010500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000034001600300001002c000c0052af9badfdcc645d0000000000000000000000001400010000000000200000000000000000000000140003006e657464657673696d30000000000000"], 0x68}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) getpeername(r1, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) 23:40:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) [ 321.147288][ T8750] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 321.155695][ T8750] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 321.164285][ T8750] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.202973][ T8750] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 321.211225][ T8750] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 321.220344][ T8750] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) 23:40:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) [ 321.392076][ T8754] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 321.400323][ T8754] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 321.409146][ T8754] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.505625][ T8756] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 321.514206][ T8756] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 321.522628][ T8756] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:27 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x150) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x484000, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sync_file_range(r2, 0x0, 0x947, 0x4) sendfile(r1, r2, 0x0, 0x6) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000200)={0x9d0000, 0x2, 0x100, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9909e3, 0x8, [], @p_u16=&(0x7f0000000180)=0x2}}) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000240)) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x24000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000340)={r5, 0x8}, 0xc) r6 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.current\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002900)={'gre0\x00', &(0x7f0000002880)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x4, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast1, @empty, {[@end, @generic={0x82, 0xb, "c318055c3b846e6b09"}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002940)={'wg1\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000002a40)={@private, @multicast1, 0x0}, &(0x7f0000002a80)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002b80)={'syztnl1\x00', &(0x7f0000002b00)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x7, 0x5, 0x8, @dev={0xfe, 0x80, [], 0x20}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x20, 0x8000, 0x6, 0xd7}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002bc0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002c40)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000002d40)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000002e00)={'syztnl2\x00', &(0x7f0000002d80)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x1f, 0x4, 0x48, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x1, 0xde, 0x7}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000003200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003040)={0x180, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008840) 23:40:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) [ 321.797838][ T8762] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 321.806271][ T8762] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 321.814727][ T8762] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) [ 322.005129][ T8765] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:28 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) 23:40:28 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) [ 322.367032][ T8770] IPVS: ftp: loaded support on port[0] = 21 23:40:28 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) 23:40:28 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) [ 322.844349][ T8770] chnl_net:caif_netlink_parms(): no params data found 23:40:28 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) [ 323.017988][ T8770] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.025347][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.034714][ T8770] device bridge_slave_0 entered promiscuous mode [ 323.049454][ T8770] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.056977][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state 23:40:29 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) [ 323.093185][ T8770] device bridge_slave_1 entered promiscuous mode [ 323.185780][ T8770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.225157][ T8770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 23:40:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 323.293194][ T8770] team0: Port device team_slave_0 added [ 323.338868][ T8770] team0: Port device team_slave_1 added [ 323.447294][ T8770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.454511][ T8770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.480822][ T8770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 23:40:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 323.603704][ T8770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.610758][ T8770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.637769][ T8770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 23:40:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 323.849260][ T8770] device hsr_slave_0 entered promiscuous mode [ 323.902515][ T8770] device hsr_slave_1 entered promiscuous mode [ 323.943022][ T8770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.950670][ T8770] Cannot create hsr debugfs directory [ 324.445043][ T8770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.512664][ T8770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.559624][ T8770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.649263][ T8770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.893262][ T8770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.937491][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.946812][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.986176][ T8770] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.005286][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.018148][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.027661][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.035289][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.104481][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.114218][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.124288][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.133830][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.141058][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.150067][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.161031][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.172102][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.182809][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.193244][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.203936][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.214389][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.224194][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.249809][ T8770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.263756][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.316079][ T8770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.389184][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.400223][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.409948][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.419627][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.427438][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.435226][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 325.445417][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.471687][ T8770] device veth0_vlan entered promiscuous mode [ 325.495367][ T8770] device veth1_vlan entered promiscuous mode [ 325.563227][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 325.573254][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.583520][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 325.593135][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 325.602654][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.612709][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.633043][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.642202][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.656130][ T8770] device veth0_macvtap entered promiscuous mode [ 325.690309][ T8770] device veth1_macvtap entered promiscuous mode [ 325.757373][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.768553][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.783303][ T8770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.792872][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.802920][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.812852][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.822937][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.840938][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.853051][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.866779][ T8770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.878194][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.888609][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:40:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x4}) 23:40:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 23:40:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 23:40:32 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r7, 0x5}, 0xc) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r9, @ANYBLOB="00b072cebb0a273e1250b170000000ffffffff0000000009000100"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x128c, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x125c, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_BASIC_EMATCHES={0x1244, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1238, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4ba, 0x1, 0x20}, {0x1, 0x7, 0x9, 0x3, 0x9, 0x0, 0x2}}}, @TCF_EM_IPT={0x178, 0x2, 0x0, 0x0, {{0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x80, 0x5, "500bd34f36636e1b2b1155f5e6fd59932229d63c14c71a4065aa32f285c6d7690417c3321149de326d43e73070b52c24b3845b4178182d6976795ac8e3c9db4b6dcf5fc266da946651156a3cbd407fcb17019e28704ab162fe6b070baf252c57f272e26d9829c1a0389085bd170847b1125292cd21a874647075160c"}, @TCA_EM_IPT_MATCH_DATA={0xcb, 0x5, "a3698ac3889ffbd15f8603bf7bfd962b7f436ee8d5dfada7498e54abab9e8c36f9efd17e939ded989b532d5cc43b54edb6339192379584c5051f30158967992bfa276a039628a2d8ce9d204782a3ef96cff8992682d90b6f052a287ef1c2c8f6c9f19253bad0abbac49c7baffee0ceb49e24a1d02714bc9db685960e87161531811e84ea917119235cda95ac2c96646911fd4aa87f71f3e87e2c398b2ebb931199e1e496c2676ad31c298041476b2a9ef1bbe79845a6817b8ccdbc06c4fb9ab1dc5b64472e0575"}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xea8c, 0x3, 0x1}, {0x8, 0x800, 0x7fff, 0x8000}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0xfff9}, {0x2, 0x7fff, 0x84, 0x0, 0x5, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0x20}, {0x3, 0xddf8, 0x4, 0x7f}}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x4, 0x0, 0xffff}, "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"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x9}, {0x8, 0x3f, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7ff, 0x1, 0x8}, {0x1, 0x0, 0xffff, 0x5, 0x7, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x6}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}]}]}}]}, 0x128c}}, 0x4080) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan0\x00'}) 23:40:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 23:40:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 326.704789][ T9016] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.792646][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:40:33 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r3, &(0x7f00000001c0)=@ax25={{0x3, @null}, [@netrom, @remote, @default, @rose, @rose, @null, @bcast, @bcast]}, &(0x7f0000000240)=0x80, 0x400) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f6, 0x400, 0x70bd2a, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0xa, 0x0, &(0x7f0000706ffc)) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@setneightbl={0x90, 0x43, 0x20, 0x70bd26, 0x25dfdbfe, {0x1c}, [@NDTA_NAME={0x10, 0x1, '/dev/nullb0\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x64e}, @NDTA_THRESH1={0x8, 0x2, 0x3f}, @NDTA_NAME={0xa, 0x1, '\x10%!.v\x00'}, @NDTA_PARMS={0x38, 0x6, 0x0, 0x1, [@NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0xc7f4}, @NDTPA_ANYCAST_DELAY={0xc}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0xfff}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x800}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x9}]}, @NDTA_THRESH1={0x8}, @NDTA_NAME={0x10, 0x1, '/dev/nullb0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x841}, 0x8000) 23:40:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:40:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x0, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) 23:40:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0xe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2c, 0x3506}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7ff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xeb}}]}, 0x48}}, 0x0) 23:40:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x0, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) 23:40:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f0000000000)=0x3d, 0x100000000) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) syz_genetlink_get_family_id$nl80211(0x0) 23:40:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x0, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) [ 327.692507][ T9040] IPVS: ftp: loaded support on port[0] = 21 [ 327.882966][ T9042] IPVS: ftp: loaded support on port[0] = 21 23:40:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xa140}]}}}]}, 0x4c}}, 0x0) [ 328.075930][ T9082] validate_nla: 2 callbacks suppressed [ 328.075958][ T9082] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 328.090406][ T9082] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 328.100129][ T9082] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:34 executing program 1: socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x3, 0x2c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) pipe(&(0x7f0000000240)) pipe(&(0x7f0000000100)) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup(r3) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44f9ff001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4757070000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="563c105e05883c87577aad00080000", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) 23:40:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) 23:40:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) [ 328.332170][ T1234] tipc: TX() has been purged, node left! 23:40:34 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r3, &(0x7f0000000000)="40ec3720bc2e3f7266d388e2c71758649b0611f550df945e4e5ee5f9927d6eae0eb28325557459caef521c7474f36658c7941a0f2aa194df686f40a046877c2bee6c0c8e2e8b5712c22b961ccaf7643588e7a56a0790004aa00d0bfb7e27", 0x5e, 0x40, &(0x7f00000000c0)={0xa, 0x4e20, 0x651f, @private2={0xfc, 0x2, [], 0x1}, 0x5}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x28, r0, 0xf591d3ee456bd401, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x5, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 23:40:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) [ 328.637016][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 23:40:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) 23:40:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 23:40:35 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x1d8, 0x0, 0x98, 0x98, 0x98, 0x98, 0x140, 0x140, 0x140, 0x140, 0x140, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x49}}}, {{@ip={@loopback, @loopback, 0x0, 0x0, 'syz_tun\x00', 'team0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x238) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r6) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r6]) r7 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) connect$bt_rfcomm(r9, &(0x7f0000000000)={0x1f, @fixed={[], 0x12}, 0x81}, 0xa) 23:40:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 23:40:35 executing program 1: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_INSTALLED(r2, 0x80024322) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) [ 329.177137][ T9117] Cannot find del_set index 0 as target 23:40:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 329.544702][ T9127] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 329.553293][ T9127] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 329.561704][ T9127] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 23:40:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 23:40:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 23:40:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007309430022000000950020de90745d000000000000515b7246"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 23:40:36 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 330.420096][ T9148] FAULT_INJECTION: forcing a failure. [ 330.420096][ T9148] name failslab, interval 1, probability 0, space 0, times 1 [ 330.433084][ T9148] CPU: 1 PID: 9148 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 330.441737][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.451860][ T9148] Call Trace: [ 330.455247][ T9148] dump_stack+0x1df/0x240 [ 330.459670][ T9148] should_fail+0x8b7/0x9e0 [ 330.464200][ T9148] __should_failslab+0x1f6/0x290 [ 330.469219][ T9148] should_failslab+0x29/0x70 [ 330.473915][ T9148] kmem_cache_alloc_node+0xfd/0xed0 [ 330.479197][ T9148] ? __alloc_skb+0x208/0xac0 [ 330.483886][ T9148] __alloc_skb+0x208/0xac0 [ 330.488409][ T9148] netlink_sendmsg+0x7d3/0x14d0 [ 330.493375][ T9148] ? netlink_getsockopt+0x1440/0x1440 [ 330.498842][ T9148] ____sys_sendmsg+0x1370/0x1400 [ 330.503907][ T9148] __sys_sendmsg+0x623/0x750 [ 330.508603][ T9148] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 330.514765][ T9148] ? kmsan_get_metadata+0x11d/0x180 [ 330.520050][ T9148] ? kmsan_get_metadata+0x11d/0x180 [ 330.525340][ T9148] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 330.531241][ T9148] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 330.537489][ T9148] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 330.543485][ T9148] __se_sys_sendmsg+0x97/0xb0 [ 330.548262][ T9148] __x64_sys_sendmsg+0x4a/0x70 [ 330.553129][ T9148] do_syscall_64+0xb0/0x150 [ 330.557759][ T9148] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 330.563703][ T9148] RIP: 0033:0x45c1d9 23:40:36 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000001900)="839c8636", 0x4}], 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 330.567630][ T9148] Code: Bad RIP value. [ 330.571739][ T9148] RSP: 002b:00007ff299dc4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.580231][ T9148] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c1d9 [ 330.588267][ T9148] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 330.596310][ T9148] RBP: 00007ff299dc4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 330.604381][ T9148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.612425][ T9148] R13: 0000000000c9fb6f R14: 00007ff299dc59c0 R15: 000000000078bf0c [ 330.709997][ T9150] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 23:40:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000500)=0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r2}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)='//{\'\x00', r2}, 0x30) perf_event_open(&(0x7f0000000400)={0x4, 0x70, 0x40, 0x1, 0x0, 0xff, 0x0, 0x479, 0x600, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7f, 0xee3}, 0x1008, 0x2, 0x200, 0x9, 0x80000800, 0x5, 0x1}, 0x0, 0x1, r3, 0x1) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r4, &(0x7f0000001cc0)={&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @empty}}}], 0x20}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xff, &(0x7f0000000300)=""/255, 0x40f00, 0xb, [], r5, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0xc, 0x2, 0xc1}, 0x10, 0xffffffffffffffff, r6}, 0x78) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 23:40:36 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 331.013042][ T9156] FAULT_INJECTION: forcing a failure. [ 331.013042][ T9156] name failslab, interval 1, probability 0, space 0, times 0 [ 331.026043][ T9156] CPU: 1 PID: 9156 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 331.034692][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.044825][ T9156] Call Trace: [ 331.048233][ T9156] dump_stack+0x1df/0x240 [ 331.052650][ T9156] should_fail+0x8b7/0x9e0 [ 331.057163][ T9156] __should_failslab+0x1f6/0x290 [ 331.062199][ T9156] should_failslab+0x29/0x70 [ 331.066882][ T9156] __kmalloc_node_track_caller+0x1c3/0x1200 [ 331.072892][ T9156] ? kmem_cache_alloc_node+0x1b0/0xed0 [ 331.078450][ T9156] ? netlink_sendmsg+0x7d3/0x14d0 [ 331.083574][ T9156] ? netlink_sendmsg+0x7d3/0x14d0 [ 331.088681][ T9156] __alloc_skb+0x2fd/0xac0 [ 331.093185][ T9156] ? netlink_sendmsg+0x7d3/0x14d0 [ 331.098302][ T9156] netlink_sendmsg+0x7d3/0x14d0 [ 331.103266][ T9156] ? netlink_getsockopt+0x1440/0x1440 [ 331.108724][ T9156] ____sys_sendmsg+0x1370/0x1400 [ 331.113762][ T9156] __sys_sendmsg+0x623/0x750 [ 331.118452][ T9156] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 331.124602][ T9156] ? kmsan_get_metadata+0x11d/0x180 [ 331.129891][ T9156] ? kmsan_get_metadata+0x11d/0x180 [ 331.135176][ T9156] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 331.141063][ T9156] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 331.147308][ T9156] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 331.153304][ T9156] __se_sys_sendmsg+0x97/0xb0 [ 331.158062][ T9156] __x64_sys_sendmsg+0x4a/0x70 [ 331.162917][ T9156] do_syscall_64+0xb0/0x150 [ 331.167521][ T9156] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 331.173467][ T9156] RIP: 0033:0x45c1d9 [ 331.177391][ T9156] Code: Bad RIP value. [ 331.181517][ T9156] RSP: 002b:00007ff299dc4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.190006][ T9156] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c1d9 [ 331.198044][ T9156] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 331.206081][ T9156] RBP: 00007ff299dc4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 331.214107][ T9156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.222169][ T9156] R13: 0000000000c9fb6f R14: 00007ff299dc59c0 R15: 000000000078bf0c [ 331.243849][ T9155] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:37 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 331.398726][ T9161] FAULT_INJECTION: forcing a failure. [ 331.398726][ T9161] name failslab, interval 1, probability 0, space 0, times 0 [ 331.412280][ T9161] CPU: 1 PID: 9161 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 331.420934][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.431042][ T9161] Call Trace: [ 331.434447][ T9161] dump_stack+0x1df/0x240 [ 331.438872][ T9161] should_fail+0x8b7/0x9e0 [ 331.443389][ T9161] __should_failslab+0x1f6/0x290 [ 331.448411][ T9161] should_failslab+0x29/0x70 [ 331.453087][ T9161] kmem_cache_alloc+0xd0/0xd70 [ 331.457937][ T9161] ? skb_clone+0x328/0x5d0 [ 331.462445][ T9161] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 331.468618][ T9161] ? rhashtable_jhash2+0x3ac/0x4d0 [ 331.473806][ T9161] ? kmsan_get_metadata+0x11d/0x180 [ 331.479108][ T9161] skb_clone+0x328/0x5d0 [ 331.483473][ T9161] netlink_deliver_tap+0x77d/0xe90 [ 331.488662][ T9161] ? kmsan_set_origin_checked+0x95/0xf0 [ 331.494300][ T9161] netlink_unicast+0xe87/0x1100 [ 331.499257][ T9161] netlink_sendmsg+0x1246/0x14d0 [ 331.504295][ T9161] ? netlink_getsockopt+0x1440/0x1440 [ 331.509742][ T9161] ____sys_sendmsg+0x1370/0x1400 [ 331.514774][ T9161] __sys_sendmsg+0x623/0x750 [ 331.519460][ T9161] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 331.525640][ T9161] ? kmsan_get_metadata+0x11d/0x180 [ 331.530920][ T9161] ? kmsan_get_metadata+0x11d/0x180 [ 331.536198][ T9161] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 331.542085][ T9161] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 331.548313][ T9161] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 331.554310][ T9161] __se_sys_sendmsg+0x97/0xb0 [ 331.559081][ T9161] __x64_sys_sendmsg+0x4a/0x70 [ 331.563936][ T9161] do_syscall_64+0xb0/0x150 [ 331.568537][ T9161] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 331.574480][ T9161] RIP: 0033:0x45c1d9 [ 331.578404][ T9161] Code: Bad RIP value. [ 331.582511][ T9161] RSP: 002b:00007ff299dc4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.590997][ T9161] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c1d9 [ 331.599031][ T9161] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 331.607057][ T9161] RBP: 00007ff299dc4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 331.615109][ T9161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 331.623147][ T9161] R13: 0000000000c9fb6f R14: 00007ff299dc59c0 R15: 000000000078bf0c [ 331.634552][ T9161] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 331.642831][ T9161] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 331.651127][ T9161] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000500)=0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r2}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)='//{\'\x00', r2}, 0x30) perf_event_open(&(0x7f0000000400)={0x4, 0x70, 0x40, 0x1, 0x0, 0xff, 0x0, 0x479, 0x600, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7f, 0xee3}, 0x1008, 0x2, 0x200, 0x9, 0x80000800, 0x5, 0x1}, 0x0, 0x1, r3, 0x1) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r4, &(0x7f0000001cc0)={&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @empty}}}], 0x20}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xff, &(0x7f0000000300)=""/255, 0x40f00, 0xb, [], r5, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0xc, 0x2, 0xc1}, 0x10, 0xffffffffffffffff, r6}, 0x78) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) [ 331.819638][ T9164] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:37 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 331.919842][ T9166] FAULT_INJECTION: forcing a failure. [ 331.919842][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 331.934756][ T9166] CPU: 1 PID: 9166 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 331.943403][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.953509][ T9166] Call Trace: [ 331.956886][ T9166] dump_stack+0x1df/0x240 [ 331.961302][ T9166] should_fail+0x8b7/0x9e0 [ 331.965813][ T9166] __should_failslab+0x1f6/0x290 [ 331.970819][ T9166] should_failslab+0x29/0x70 [ 331.975496][ T9166] kmem_cache_alloc_trace+0xf3/0xd70 [ 331.980855][ T9166] ? rtnl_newlink+0xe0/0x3900 [ 331.985618][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 331.990887][ T9166] ? rtnl_setlink+0x7e0/0x7e0 [ 331.995639][ T9166] rtnl_newlink+0xe0/0x3900 [ 332.000226][ T9166] ? kmsan_internal_poison_shadow+0x9f/0xd0 [ 332.006205][ T9166] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 332.012204][ T9166] ? kmsan_slab_free+0x6e/0xb0 [ 332.017048][ T9166] ? nlmon_xmit+0xe5/0x140 [ 332.021547][ T9166] ? __dev_queue_xmit+0x2f8d/0x3b20 [ 332.026825][ T9166] ? dev_queue_xmit+0x4b/0x60 [ 332.031593][ T9166] ? netlink_deliver_tap+0x9d4/0xe90 [ 332.036968][ T9166] ? netlink_unicast+0xe87/0x1100 [ 332.042087][ T9166] ? ____sys_sendmsg+0x1370/0x1400 [ 332.047290][ T9166] ? __sys_sendmsg+0x623/0x750 [ 332.052149][ T9166] ? __x64_sys_sendmsg+0x4a/0x70 [ 332.057210][ T9166] ? do_syscall_64+0xb0/0x150 [ 332.061996][ T9166] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.068176][ T9166] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 332.074352][ T9166] ? __module_address+0x68/0x600 [ 332.079409][ T9166] ? is_module_text_address+0x4d/0x2a0 [ 332.084959][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 332.090249][ T9166] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 332.096147][ T9166] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 332.102310][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 332.107607][ T9166] ? kmsan_set_origin_checked+0x95/0xf0 [ 332.113246][ T9166] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 332.119413][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 332.124704][ T9166] ? kmsan_set_origin_checked+0x95/0xf0 [ 332.130340][ T9166] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 332.136513][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 332.141821][ T9166] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 332.147711][ T9166] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 332.153899][ T9166] ? security_capable+0x1cb/0x220 [ 332.159027][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 332.164315][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 332.169618][ T9166] ? kmsan_set_origin_checked+0x95/0xf0 [ 332.175265][ T9166] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 332.181434][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 332.186727][ T9166] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 332.192604][ T9166] ? rtnl_setlink+0x7e0/0x7e0 [ 332.197353][ T9166] rtnetlink_rcv_msg+0x1184/0x15c0 [ 332.202557][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 332.207849][ T9166] ? local_bh_enable+0x36/0x40 [ 332.212701][ T9166] ? __dev_queue_xmit+0x338e/0x3b20 [ 332.217999][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 332.223298][ T9166] ? kmsan_get_metadata+0x4f/0x180 [ 332.228497][ T9166] ? kmsan_get_metadata+0x4f/0x180 [ 332.233685][ T9166] ? kmsan_set_origin_checked+0x95/0xf0 [ 332.239308][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 332.244590][ T9166] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 332.250486][ T9166] netlink_rcv_skb+0x451/0x650 [ 332.255319][ T9166] ? rtnetlink_bind+0x120/0x120 [ 332.260254][ T9166] rtnetlink_rcv+0x50/0x60 [ 332.264758][ T9166] netlink_unicast+0xf9e/0x1100 [ 332.269684][ T9166] ? rtnetlink_net_exit+0x90/0x90 [ 332.274807][ T9166] netlink_sendmsg+0x1246/0x14d0 [ 332.279850][ T9166] ? netlink_getsockopt+0x1440/0x1440 [ 332.285308][ T9166] ____sys_sendmsg+0x1370/0x1400 [ 332.290360][ T9166] __sys_sendmsg+0x623/0x750 [ 332.295045][ T9166] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 332.301200][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 332.306481][ T9166] ? kmsan_get_metadata+0x11d/0x180 [ 332.311771][ T9166] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 332.317691][ T9166] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 332.323933][ T9166] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 332.329930][ T9166] __se_sys_sendmsg+0x97/0xb0 [ 332.334753][ T9166] __x64_sys_sendmsg+0x4a/0x70 [ 332.339602][ T9166] do_syscall_64+0xb0/0x150 [ 332.344222][ T9166] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.350174][ T9166] RIP: 0033:0x45c1d9 [ 332.354099][ T9166] Code: Bad RIP value. [ 332.358210][ T9166] RSP: 002b:00007ff299dc4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.366693][ T9166] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c1d9 [ 332.374726][ T9166] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 332.382756][ T9166] RBP: 00007ff299dc4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 332.390816][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 332.398847][ T9166] R13: 0000000000c9fb6f R14: 00007ff299dc59c0 R15: 000000000078bf0c 23:40:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000500)=0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r2}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)='//{\'\x00', r2}, 0x30) perf_event_open(&(0x7f0000000400)={0x4, 0x70, 0x40, 0x1, 0x0, 0xff, 0x0, 0x479, 0x600, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7f, 0xee3}, 0x1008, 0x2, 0x200, 0x9, 0x80000800, 0x5, 0x1}, 0x0, 0x1, r3, 0x1) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r4, &(0x7f0000001cc0)={&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @empty}}}], 0x20}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xff, &(0x7f0000000300)=""/255, 0x40f00, 0xb, [], r5, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0xc, 0x2, 0xc1}, 0x10, 0xffffffffffffffff, r6}, 0x78) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) [ 332.528456][ T9170] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:38 executing program 0 (fault-call:1 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 332.751634][ T9173] FAULT_INJECTION: forcing a failure. [ 332.751634][ T9173] name failslab, interval 1, probability 0, space 0, times 0 [ 332.764520][ T9173] CPU: 0 PID: 9173 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 332.773167][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.783277][ T9173] Call Trace: [ 332.786662][ T9173] dump_stack+0x1df/0x240 [ 332.791077][ T9173] should_fail+0x8b7/0x9e0 [ 332.795595][ T9173] __should_failslab+0x1f6/0x290 [ 332.800629][ T9173] should_failslab+0x29/0x70 [ 332.805342][ T9173] kmem_cache_alloc_trace+0xf3/0xd70 [ 332.810714][ T9173] ? rtnl_newlink+0xe0/0x3900 [ 332.815491][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 332.820765][ T9173] ? rtnl_setlink+0x7e0/0x7e0 [ 332.825512][ T9173] rtnl_newlink+0xe0/0x3900 [ 332.830109][ T9173] ? kmsan_internal_poison_shadow+0x9f/0xd0 [ 332.836110][ T9173] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 332.842094][ T9173] ? kmsan_slab_free+0x6e/0xb0 [ 332.846954][ T9173] ? nlmon_xmit+0xe5/0x140 [ 332.851468][ T9173] ? __dev_queue_xmit+0x2f8d/0x3b20 [ 332.856750][ T9173] ? dev_queue_xmit+0x4b/0x60 [ 332.861528][ T9173] ? netlink_deliver_tap+0x9d4/0xe90 [ 332.866894][ T9173] ? netlink_unicast+0xe87/0x1100 [ 332.872029][ T9173] ? ____sys_sendmsg+0x1370/0x1400 [ 332.877210][ T9173] ? __sys_sendmsg+0x623/0x750 [ 332.882042][ T9173] ? __x64_sys_sendmsg+0x4a/0x70 [ 332.887064][ T9173] ? do_syscall_64+0xb0/0x150 [ 332.891838][ T9173] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.897989][ T9173] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 332.904317][ T9173] ? kmem_cache_free+0x1bbe/0x2d20 [ 332.909510][ T9173] ? netlink_unicast+0xe87/0x1100 [ 332.914607][ T9173] ? netlink_sendmsg+0x1246/0x14d0 [ 332.919794][ T9173] ? ____sys_sendmsg+0x1370/0x1400 [ 332.924984][ T9173] ? __sys_sendmsg+0x623/0x750 [ 332.929848][ T9173] ? __se_sys_sendmsg+0x97/0xb0 [ 332.934796][ T9173] ? __kfree_skb+0x1de/0x240 [ 332.939473][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 332.944750][ T9173] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 332.950635][ T9173] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 332.956778][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 332.962050][ T9173] ? kmsan_set_origin_checked+0x95/0xf0 [ 332.967673][ T9173] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 332.973816][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 332.979086][ T9173] ? kmsan_set_origin_checked+0x95/0xf0 [ 332.984712][ T9173] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 332.990867][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 332.996151][ T9173] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 333.002038][ T9173] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 333.008221][ T9173] ? security_capable+0x1cb/0x220 [ 333.013321][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 333.018595][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 333.023866][ T9173] ? kmsan_set_origin_checked+0x95/0xf0 [ 333.029491][ T9173] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 333.035633][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 333.040905][ T9173] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 333.046776][ T9173] ? rtnl_setlink+0x7e0/0x7e0 [ 333.051522][ T9173] rtnetlink_rcv_msg+0x1184/0x15c0 [ 333.056733][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 333.062034][ T9173] ? local_bh_enable+0x36/0x40 [ 333.066878][ T9173] ? __dev_queue_xmit+0x338e/0x3b20 [ 333.072161][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 333.077433][ T9173] ? kmsan_get_metadata+0x4f/0x180 [ 333.082615][ T9173] ? kmsan_get_metadata+0x4f/0x180 [ 333.087795][ T9173] ? kmsan_set_origin_checked+0x95/0xf0 [ 333.093414][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 333.098688][ T9173] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 333.104600][ T9173] netlink_rcv_skb+0x451/0x650 [ 333.109432][ T9173] ? rtnetlink_bind+0x120/0x120 [ 333.114396][ T9173] rtnetlink_rcv+0x50/0x60 [ 333.118895][ T9173] netlink_unicast+0xf9e/0x1100 [ 333.123817][ T9173] ? rtnetlink_net_exit+0x90/0x90 [ 333.128940][ T9173] netlink_sendmsg+0x1246/0x14d0 [ 333.133990][ T9173] ? netlink_getsockopt+0x1440/0x1440 [ 333.139467][ T9173] ____sys_sendmsg+0x1370/0x1400 [ 333.144520][ T9173] __sys_sendmsg+0x623/0x750 [ 333.149212][ T9173] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 333.155366][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 333.160673][ T9173] ? kmsan_get_metadata+0x11d/0x180 [ 333.165996][ T9173] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 333.171907][ T9173] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 333.178179][ T9173] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 333.184192][ T9173] __se_sys_sendmsg+0x97/0xb0 [ 333.188976][ T9173] __x64_sys_sendmsg+0x4a/0x70 [ 333.193827][ T9173] do_syscall_64+0xb0/0x150 [ 333.198417][ T9173] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 333.204357][ T9173] RIP: 0033:0x45c1d9 [ 333.208270][ T9173] Code: Bad RIP value. [ 333.212375][ T9173] RSP: 002b:00007ff299dc4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.220876][ T9173] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c1d9 [ 333.228903][ T9173] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 333.236932][ T9173] RBP: 00007ff299dc4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 333.244968][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 333.253102][ T9173] R13: 0000000000c9fb6f R14: 00007ff299dc59c0 R15: 000000000078bf0c 23:40:39 executing program 0 (fault-call:1 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:39 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000081", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014001d"], 0x3}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r7) pwrite64(r6, &(0x7f0000000240)="58c802942dae27de604ea5d3c2f2ec5a742c1272476fd284f0771cd3f1a74cbd2612e5ece1b762f97f6b7659f4eb66e93c7ffea33fa2268b9a91b139eb425601f3c847ef345e1e243788680a79f8fb05362b1c12b6af07d875979299adf4aa5ada67c5bce30e59b7dcf2c4c93544aebbe73decf0ac32d16522b5e0ecdc9afec44bd359688100"/148, 0x94, 0xd02) [ 333.515272][ T9177] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 333.523596][ T9177] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 333.531969][ T9177] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 333.541463][ T9177] FAULT_INJECTION: forcing a failure. [ 333.541463][ T9177] name failslab, interval 1, probability 0, space 0, times 0 [ 333.554214][ T9177] CPU: 1 PID: 9177 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 333.562862][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.573816][ T9177] Call Trace: [ 333.577204][ T9177] dump_stack+0x1df/0x240 [ 333.581628][ T9177] should_fail+0x8b7/0x9e0 [ 333.586142][ T9177] __should_failslab+0x1f6/0x290 [ 333.591164][ T9177] should_failslab+0x29/0x70 [ 333.595850][ T9177] __kmalloc_node_track_caller+0x1c3/0x1200 [ 333.601829][ T9177] ? kmem_cache_alloc_node+0x1b0/0xed0 [ 333.607367][ T9177] ? netlink_ack+0x54c/0x11a0 [ 333.612128][ T9177] ? netlink_ack+0x54c/0x11a0 [ 333.616873][ T9177] __alloc_skb+0x2fd/0xac0 [ 333.621366][ T9177] ? netlink_ack+0x54c/0x11a0 [ 333.626120][ T9177] ? kmsan_get_metadata+0x31/0x180 [ 333.631314][ T9177] netlink_ack+0x54c/0x11a0 [ 333.635909][ T9177] ? kmsan_get_metadata+0x4f/0x180 [ 333.641126][ T9177] netlink_rcv_skb+0x321/0x650 [ 333.645968][ T9177] ? rtnetlink_bind+0x120/0x120 [ 333.650906][ T9177] rtnetlink_rcv+0x50/0x60 [ 333.655412][ T9177] netlink_unicast+0xf9e/0x1100 [ 333.660343][ T9177] ? rtnetlink_net_exit+0x90/0x90 [ 333.665492][ T9177] netlink_sendmsg+0x1246/0x14d0 [ 333.670542][ T9177] ? netlink_getsockopt+0x1440/0x1440 [ 333.676002][ T9177] ____sys_sendmsg+0x1370/0x1400 [ 333.681051][ T9177] __sys_sendmsg+0x623/0x750 [ 333.685738][ T9177] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 333.691887][ T9177] ? kmsan_get_metadata+0x11d/0x180 [ 333.697154][ T9177] ? kmsan_get_metadata+0x11d/0x180 [ 333.702420][ T9177] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 333.708295][ T9177] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 333.714533][ T9177] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 333.720521][ T9177] __se_sys_sendmsg+0x97/0xb0 [ 333.725280][ T9177] __x64_sys_sendmsg+0x4a/0x70 [ 333.730121][ T9177] do_syscall_64+0xb0/0x150 [ 333.734706][ T9177] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 333.740660][ T9177] RIP: 0033:0x45c1d9 [ 333.744578][ T9177] Code: Bad RIP value. [ 333.748698][ T9177] RSP: 002b:00007ff299dc4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.757191][ T9177] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c1d9 [ 333.765300][ T9177] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 333.773325][ T9177] RBP: 00007ff299dc4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 333.781341][ T9177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 333.789377][ T9177] R13: 0000000000c9fb6f R14: 00007ff299dc59c0 R15: 000000000078bf0c 23:40:40 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffbd}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff6e}, 0x48) r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r4}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r4}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x5, 0x9, 0x8, 0x250, r2, 0x2, [], r4, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x40) 23:40:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x4, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000000)=0x1) 23:40:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="61548d499f21037fe7deba611b6a4f5c9e98d328ab569cd3687863bb8b2c13501662ffd89a96660b9c8b270828b64a978f61ed5feffb2e1fdb617a45377b24fc359eb1c652a44fbc8a0eff958970f88d76f2dad6e5539bb207646433907813be93bff815a71afd3c6a73d6c81f3389de", @ANYRES32=0x0, @ANYBLOB="000000000000a3450000130012800b00010062726964670600001c0002800c001f00008a0000000000000c001f00"], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r1}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r1}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'sit0\x00', r1, 0x2f, 0x6, 0x4, 0x3, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7800, 0x20, 0x6, 0x6}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r4}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r4}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r5 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r9}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000400)={@can, {0x0}, &(0x7f0000000100), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', r9, 0x6, 0x81, 0x4, 0xff, 0x50, @loopback, @ipv4={[], [], @empty}, 0x7800, 0x1, 0x1}}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="04020000300000012bbd7000fbdbdf2500000000f0010100ec0109000b0001006d6972726564000004010280200002000100000040000000ffffffff01000000e909000003000000", @ANYRES32=0x0, @ANYBLOB="20000200920000000300000000000010060000007f00000004000000", @ANYRES32=0x0, @ANYBLOB="20000200050000000500000004000000000400000100008003000000", @ANYRES32=0x0, @ANYBLOB="20000200573e0000c3b2000005000000330000000900000001000000", @ANYRES32=0x0, @ANYBLOB="200002000800000005000000050000001f0000000002000002000000", @ANYRES32=0x0, @ANYBLOB="200002000000010004150000000100000020000000050000fb0300000000000000000000000008d41cad2461d50b2d571a3b65a475d2737119c338bce00076a78babb76176", @ANYRES32=r2, @ANYBLOB="2000020001040000f8ffffff08000000000000800101000004000000", @ANYRES32=r4, @ANYBLOB="203a021209000200000003010000", @ANYRES32=r10, @ANYBLOB="bf00060045f38aac3dbfe903067a9bff0dc442d8c14906696f114baa49dace480b60a45ca287874ff04b76872b2e455232111c9d5360ac0ff0c77a5b8ae4690462d8f32237860397c86eb4154663dd32dba5aa012d4e80817afc19929fbed3a8241af7e069cefd03cbc868bd1f17cedfc71102f5f135d22e63e999d2ac0a958f2540bb2c91df438c9c2f82579eb4e1b980561d255a10c7a96ebe0eefa2621baea364f7097127b47196d5325f8b32f696564f898114062973e4e9660ddb633d000c00070001000000010000000c0008000300000001000000"], 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) 23:40:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x28}}, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r2, 0x1, 0x7, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) unshare(0x74040d40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r3, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @random="cc1047064c90", 'veth0\x00'}}, 0x80) [ 334.930722][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@none, 0xcd1}) [ 334.988465][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000b3a7e141ac7fec0837d367e2435fb20714578528aebce8dbb46c30960d4484c4d2a04a541da456512dbc8e0b765fe8898063b05a3deec65e52ca92cdc92605bdf3904a83e5f21bda1d347e908ce8dc2d85a4fcc626c6f24dbf5a461f08d7307a44f307", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x910}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast2, r3}, 0xc) [ 335.101740][ T9203] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 335.109992][ T9203] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 335.118434][ T9203] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 335.146339][ T9203] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 335.154706][ T9203] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 335.163127][ T9203] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000104da4d5c4c4000b9d651319", @ANYRES32=0x0, @ANYBLOB="4000000000000000130012800b00010062726964676500001c0002800c001f001e000000000000000c001f510000000000000000"], 0x4c}}, 0x0) msgget$private(0x0, 0x44c) [ 335.226788][ T9207] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.274104][ T9207] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000b3a7e141ac7fec0837d367e2435fb20714578528aebce8dbb46c30960d4484c4d2a04a541da456512dbc8e0b765fe8898063b05a3deec65e52ca92cdc92605bdf3904a83e5f21bda1d347e908ce8dc2d85a4fcc626c6f24dbf5a461f08d7307a44f307", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x910}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast2, r3}, 0xc) 23:40:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="0c0000001000010400000000faffffffffffffff", @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000"], 0x4c}}, 0x0) [ 335.455161][ T9214] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000b3a7e141ac7fec0837d367e2435fb20714578528aebce8dbb46c30960d4484c4d2a04a541da456512dbc8e0b765fe8898063b05a3deec65e52ca92cdc92605bdf3904a83e5f21bda1d347e908ce8dc2d85a4fcc626c6f24dbf5a461f08d7307a44f307", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x910}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast2, r3}, 0xc) 23:40:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000b3a7e141ac7fec0837d367e2435fb20714578528aebce8dbb46c30960d4484c4d2a04a541da456512dbc8e0b765fe8898063b05a3deec65e52ca92cdc92605bdf3904a83e5f21bda1d347e908ce8dc2d85a4fcc626c6f24dbf5a461f08d7307a44f307", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x910}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast2, r3}, 0xc) [ 335.894738][ T9222] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 335.903157][ T9222] netlink: 'syz-executor.0': attribute type 31 has an invalid length. 23:40:42 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x44, r3, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x42}]}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "184a63b844a4dcc95260fb90bfd0ead81d1be10f72013411dab18123ee394f8110fee5044845a8f9e05240c4c573bc6290b633f06c7c7695f5a5567c2d4d5a3e74094397e8b14cbeb4d4d95fe338fd3b768d8dca092c5f0ad5538b170fa09a6a44ec6b487f65d7bce9cc9d9e2a42a901a73870a0a2fbc429628aefe75ef531d096fb42232d87e1d004628bbcb4d66008717abfe2de8bc4479a6a2b251a55487612926a6d0e52c32c966f15207494bb93587ec0cae2a227c176c23340a3b490e20acfc67bce997e5b733bfe95d1f3c484ca4797ab65c6dd6912605c4f3759c1b95577302f146415c1f3bb83fd2c4a76c1c53266057a33"}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "989762ad5b3a9533662c169e2857f1d2a5406731e19cba4bdde24bcecca217e2327cfc7e7a211aeb447fbe7b29650609f3"}, @ETHTOOL_A_BITSET_BITS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '/dev/kvm\x00'}]}]}]}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x1ae}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000810}, 0x800) write$P9_RSTAT(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x55) sendto$inet(r1, 0x0, 0x0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) [ 336.194703][ T9230] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:40:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000410000000e0001006e657464657673696d000000280002006e657464657673696d30"], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x20004000) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe87b}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4000015) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(0x0, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sched_getscheduler(r7) process_vm_writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000000240)=""/75, 0x4b}], 0x2, &(0x7f0000000300)=[{&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000500)=""/202, 0xca}], 0x2, 0x0) 23:40:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 336.516622][ T9234] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 336.525296][ T9234] netlink: 'syz-executor.0': attribute type 31 has an invalid length. 23:40:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xb3, 0x0, 0xfb, "8c87a4552f02de128409b59d30bf094d", "d3cf33fc2be6939eeb27dce5dcf126b8b30709fdb22d9d9f9800662035c454b364e9a5663699b4c0798ce81a37b069b58e2d197ec6d835b4f08edf8a5da11e8277810c44d4fd0254ebaea8515bdba89237118d913079572387e176cb28e8757ffab86083f7cc6a7e32c9883fb8d6a7c12290f543228e309b2e46d85077d8d1a41712318250ea340afffd881f3e2c2dc433c7330457820a5dd3adf15874f9"}, 0xb3, 0x0) 23:40:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 336.906733][ T9243] __nla_validate_parse: 6 callbacks suppressed [ 336.906763][ T9243] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 337.002015][ T9245] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400000004b47f410400fbff00", @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000"], 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000007, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000000)) [ 337.305960][ T9250] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 337.339944][ T9251] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.350388][ T9250] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:43 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 23:40:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r2}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r2}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r4}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r4}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) recvmsg(r0, &(0x7f0000001680)={&(0x7f0000000200)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000400)=""/100, 0x64}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x5, &(0x7f0000000300)=""/28, 0x1c}, 0x10120) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x380, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x40) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r7}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r9}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r9}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="ec010000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf250f000000740001801400020065727370616e30000000000000000000140002006261746164763000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14130076657468315f746d00007f080001004e7693cdf14dfa26c1de7a3dafb91738ed73ed28366d83c2354c34e55aa2d038432aeb82bdef458401426c4548b523d020898f5817521225bc359965ddc86dbc52a02c0e3805dba141dee30ef0fd", @ANYRES32=0x0, @ANYBLOB="140002006970365f76746930000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000180001801400020076657468315f746f5f627269646765001800018014000200726f7365300000000000000000000000380001801400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000038000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766574683100000000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e30000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000003800018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="1400020074756e6c30000000000000000000000008000300000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000100", @ANYRES32=r7, @ANYBLOB="2c000180080003000100000008000100", @ANYRES32=r9, @ANYBLOB="080003000100000008000300020000000800030003000000"], 0x1ec}}, 0x48011) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:43 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 337.847152][ T9261] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:43 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 23:40:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="d4000000070a010400000000000000000a00000a7e0007404eb883b5e1e50f892236685d1e3af3da94712afa24994f26f0df39fd2b83aa5395806db48dc327f756e4923faa3b5164e1783913d02885ee5124a98dd929343aecb29fe3764e709a73e21144f343a35baa61f871513b150e5f25b5eebee5bd493d7c0dcd3336d3d5811dd6dbf6cc16657f7cef15000008000940000000030c00058008000240000000002c0005800800024000000002080000020400005c0800014000000008080001400000884c0800014000000800000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$kcm(0x10, 0x800000000002, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000000c0)=""/230) r6 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000500)=""/104) socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x238604, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x4c}}, 0x0) 23:40:44 executing program 0: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r4, 0x40, 0x4, 0x9}) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000040)=0x44) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x80}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c}}}]}, 0x50}}, 0x0) 23:40:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 338.453079][ T9274] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 338.789141][ T9277] validate_nla: 18 callbacks suppressed [ 338.789171][ T9277] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 338.803528][ T9277] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 338.811993][ T9277] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 339.186479][ T9280] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 339.189486][ T9281] IPVS: ftp: loaded support on port[0] = 21 [ 339.194886][ T9280] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 339.209457][ T9280] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:45 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x420100) socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xe583, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="04002dbd7000ff000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd41}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x64}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000380)={0x81, [[0x9, 0x6, 0x7f, 0x0, 0x100, 0x2, 0x87af, 0xffffffff], [0x8001, 0x4000400, 0x8, 0x40, 0xfffffe00, 0x1, 0x9, 0xff], [0x40, 0x9, 0x1f, 0x660, 0x0, 0x80000000, 0x2, 0x5]], [], [{0x9, 0x9, 0x0, 0x1, 0x1}, {0xffffffff, 0xdd1, 0x0, 0x1, 0x1}, {0xec2a, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x800, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x101, 0x1, 0x1}, {0x8000, 0x8, 0x1, 0x1}, {0x200, 0xffff, 0x0, 0x0, 0x1}, {0x0, 0x200, 0x1}, {0xfffff800, 0x5, 0x0, 0x0, 0x1}, {0x100, 0x2, 0x0, 0x1, 0x1}, {0x5b, 0xf2, 0x1, 0x1}, {0x1, 0x4, 0x1, 0x0, 0x0, 0x1}], [], 0x3}) finit_module(r0, &(0x7f0000000100)='\x00', 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1080100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x100, 0x70bd29, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0xc0045006, 0x747000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000170000130033800b00010062726964676500001c0057f00c001f0d00919b43b9ae3e81e36e000000000c001f000000000000000000a959e40aefd1a8b8993101f5c44ba10b3a2d030d4b70abc75aae7ee2db"], 0x4c}}, 0x0) 23:40:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 339.693132][ T9350] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 339.701563][ T9350] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 339.709796][ T9350] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r2, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYRES64=r3, @ANYRES16=r6, @ANYBLOB="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"], 0x54}}, 0x20000050) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r7}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@delneigh={0x6c, 0x1d, 0x100, 0x70bd2d, 0x25dfdbfd, {0xf, 0x0, 0x0, r7, 0x39, 0x14, 0x6}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_LINK_NETNSID={0x8, 0xa, 0x8}, @NDA_CACHEINFO={0x14, 0x3, {0x2, 0x9, 0x7, 0x3}}, @NDA_CACHEINFO={0x14, 0x3, {0x1, 0x1000, 0x0, 0xfff}}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x6c}}, 0x0) 23:40:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 339.992616][ T9281] chnl_net:caif_netlink_parms(): no params data found 23:40:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 340.210646][ T9408] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 340.218880][ T9408] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 340.322169][ T9411] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 340.330409][ T9411] netlink: 'syz-executor.0': attribute type 31 has an invalid length. 23:40:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 340.451761][ T9281] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.459004][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.468979][ T9281] device bridge_slave_0 entered promiscuous mode 23:40:46 executing program 0: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x800, 0x0) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0xbf3150ca6a7ad441, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r2, 0x4c00, r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) getpeername$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$nl_route(0x10, 0x3, 0x0) [ 340.568084][ T9281] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.575491][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.584953][ T9281] device bridge_slave_1 entered promiscuous mode 23:40:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 340.720121][ T9281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.772191][ T9281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.931989][ T9281] team0: Port device team_slave_0 added 23:40:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 340.975779][ T9281] team0: Port device team_slave_1 added [ 341.124145][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.131593][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.157725][ T9281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.308009][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.315553][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.341709][ T9281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.476078][ T9281] device hsr_slave_0 entered promiscuous mode [ 341.511758][ T9281] device hsr_slave_1 entered promiscuous mode [ 341.560897][ T9281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.568593][ T9281] Cannot create hsr debugfs directory [ 342.096310][ T9281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 342.139332][ T9281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 342.202198][ T9281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 342.281912][ T9281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.627668][ T9281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.668652][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.677955][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.709222][ T9281] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.730673][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.742701][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.752248][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.759471][ T8667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.824644][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.834525][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.844630][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.854176][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.861532][ T8667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.870666][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.881671][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.892710][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 342.903514][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.913804][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 342.924466][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.944238][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.954586][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.964436][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.985588][ T9481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.995435][ T9481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.019260][ T9281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.127056][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.136381][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.165910][ T9281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.223341][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 343.233563][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 343.284492][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 343.294380][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 343.317489][ T9281] device veth0_vlan entered promiscuous mode [ 343.332156][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.341826][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 343.371570][ T9281] device veth1_vlan entered promiscuous mode [ 343.439151][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 343.449614][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 343.459403][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.469629][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.489951][ T9281] device veth0_macvtap entered promiscuous mode [ 343.509001][ T9281] device veth1_macvtap entered promiscuous mode [ 343.555414][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 343.569711][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.579786][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 343.590424][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.604490][ T9281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.614665][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 343.625235][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 343.634878][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 343.645047][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 343.686620][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.697311][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.707588][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 343.718450][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.732311][ T9281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.742683][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 343.753685][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 344.074060][ T9519] validate_nla: 8 callbacks suppressed [ 344.074095][ T9519] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 344.088668][ T9519] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 344.097640][ T9519] __nla_validate_parse: 6 callbacks suppressed [ 344.097667][ T9519] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 23:40:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r7}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r10, r9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_delroute={0x70, 0x19, 0x800, 0x70bd27, 0x25dfdbff, {0x2, 0xac423ad0b72331ff, 0x20, 0x17, 0xfe, 0x3, 0x0, 0x5, 0x2800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_IIF={0x8}, @RTA_UID={0x8, 0x19, r2}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_IIF={0x8, 0x3, r5}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x3f, 0xf9, r7}}, @RTA_UID={0x8, 0x19, r9}, @RTA_SRC={0x8, 0x2, @local}, @RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000c0) 23:40:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 344.352720][ T9525] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 344.361218][ T9525] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 344.369446][ T9525] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 344.391439][ T9528] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 344.399851][ T9528] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 344.408564][ T9528] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 344.494745][ T9530] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 344.504189][ T9530] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 344.512566][ T9530] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 344.524267][ T9525] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 344.532976][ T9525] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 344.541349][ T9525] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:50 executing program 0: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x6, 0x11, r2, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x80000000, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x4}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 344.917579][ T9533] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 345.113095][ T9538] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 23:40:51 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) [ 345.290853][ T9545] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/104, 0x68) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x4c}}, 0x0) 23:40:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:51 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) [ 345.600887][ T9554] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x206, 0x4}, [@IFLA_EVENT={0x8, 0x2c, 0x7405}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r4 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a5", 0xb1}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8}], 0x1, 0x0) setgid(r5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000000c0)={0x2, 'syzkaller1\x00', {0x5}, 0x1ff}) r6 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 23:40:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:51 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) [ 345.938998][ T9564] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r6, 0x5, 0x8}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:52 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r4}, 0x3c) 23:40:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x131000, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r1, r4, 0xb}, 0x10) 23:40:52 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) 23:40:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:52 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) 23:40:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x80000) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f00000000c0)=""/237) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000002c0012800b0001003dccec953d8eaee56272696467650000421b2cd0c16f1dafe5c35741aea61c0002800c001f0000000000000000000c001f0000"], 0x4c}}, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) 23:40:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:52 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:40:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffbff, 0x4200) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r1, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_DEL(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xe0, 0xa, 0x6, 0x102, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_team\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) poll(&(0x7f0000000200)=[{r3}, {r2, 0x2}], 0x2, 0x6) 23:40:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x406, r2) 23:40:53 executing program 0: clock_nanosleep(0xa, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', r5, 0x4, 0x3f, 0x4, 0xbec4, 0x40, @private1, @mcast2, 0x700, 0x8, 0x4, 0x100}}) 23:40:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r3}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r3}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r3, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) 23:40:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r3}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r3}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r3, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) socket$kcm(0x10, 0x800000000002, 0x0) 23:40:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd2b, 0x25dfdbff, {0x2, 0x80, 0x30, 0x2d, 0xfc, 0x2, 0xfe, 0x0, 0xb00}, ["", ""]}, 0x1c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi={0x8, 0x1, 0xfff, 0x4c47504a, [0x10, 0x2008], [0x4, 0x200], 0x54a525a429751040}}) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKRAGET(r6, 0x1263, &(0x7f0000000040)) recvfrom$packet(r3, &(0x7f0000000000)=""/45, 0x2d, 0x0, 0x0, 0x0) 23:40:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r3}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r3}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r3, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:40:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:54 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:40:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:54 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:40:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:54 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:40:54 executing program 0: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@nfc_llcp, &(0x7f0000000180)=0x80) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f00000001c0)={0x6, 0x2, 0x5}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000020000000000280024800b0001006272696467650000180002800500b2b59048d19b2238398a54359e913019001f2000000c001f0000"], 0x50}}, 0x0) 23:40:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvfrom$unix(r3, &(0x7f00000000c0)=""/167, 0xa7, 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:40:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:55 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) [ 349.088924][ T9650] validate_nla: 52 callbacks suppressed [ 349.088952][ T9650] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 349.103286][ T9650] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 349.111698][ T9650] __nla_validate_parse: 23 callbacks suppressed [ 349.111721][ T9650] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.202713][ T9652] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 349.213371][ T9652] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 349.221739][ T9652] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:55 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) [ 349.579310][ T9657] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 349.587845][ T9657] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 349.597091][ T9657] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:55 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:40:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 349.813092][ T9661] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 349.822220][ T9661] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 349.830659][ T9661] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 349.981662][ T9666] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 349.990096][ T9666] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 349.998598][ T9666] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:56 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r1}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r1}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) 23:40:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 350.254204][ T9673] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0x7, 0x8, 0x5, "f4beaa1ab64e6a"}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 350.465683][ T9678] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 350.546970][ T9680] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r9, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={r9, 0x4c, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x5, @mcast2}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r10, 0x770}, 0x8) [ 350.626279][ T9681] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 350.755450][ T9685] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:40:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 23:40:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x5c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x100000, 0x106000}) 23:40:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 23:40:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYRESOCT=r2], 0x4c}}, 0x0) 23:40:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:40:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:40:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES64=r1, @ANYBLOB="0000000000001400130091fc984a7b6251c5ad909a5ab005800e"], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 23:40:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:40:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:40:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:40:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newneigh={0x1c, 0x1c, 0x100, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x20, 0xc, 0x8}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r5, r4, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0xb, 0x2, 0x7) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r9, r8, 0x0) setresuid(r4, r6, r8) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$KVM_GET_MSRS(r10, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000000000000000000cd4fa93300"]) 23:40:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:40:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d4301b6f193e5354d94c00000010000192960000a7347dfac59588d4ab9672cbb84e3b2a62d859221607cd517c0ff0b095227b58336e4394565b67f50721f182bec9a4f580b077530774a707b5334c4e094430ff47b29406b0864053aa7af3e60912c45d7bcee124e249e938fbdbc0b750529761384d68eaa73569991ab5581625573d7187726fef721c1c14733b00886f414ba24f9abd8c75b6d59991109164e0c6e890eca9c367ba7c090ca0e09a1fb5", @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000"], 0x4c}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20080, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r3, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x10) 23:40:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0xb03}, 0x1c}}, 0x0) 23:40:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x76, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0xb03}, 0x1c}}, 0x0) 23:40:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000104000000000000012a01c71400", @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000898662406a176ac70159c0d1b012642c2d9f1974163f2d732ab9ed33b3d636feeb34f7dc7f59316012a9eb2ffa8940bb9b9dff84c16047260ffea613a480ebe8bfaa61f3a5443b5c152be4ea151fd6673ef690d04e9ea5ba390eed600b0ec8d490b20616bb60ab8c9e9614bb817ffae7c85f0d05de81e00cb26f89f0cd250294a8df03ba33b712cd3567b60650300603f692"], 0x4c}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x7f97) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000001c0)=""/224) 23:40:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0xb03}, 0x1c}}, 0x0) 23:40:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_CLEAR_QUE(r3, 0xab05) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000000)={0xffffff80, 0x40}) 23:40:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r7}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r10, r9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_delroute={0x70, 0x19, 0x800, 0x70bd27, 0x25dfdbff, {0x2, 0xac423ad0b72331ff, 0x20, 0x17, 0xfe, 0x3, 0x0, 0x5, 0x2800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_IIF={0x8}, @RTA_UID={0x8, 0x19, r2}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_IIF={0x8, 0x3, r5}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x3f, 0xf9, r7}}, @RTA_UID={0x8, 0x19, r9}, @RTA_SRC={0x8, 0x2, @local}, @RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000c0) 23:40:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x401, 0x28000) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0xa, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1e}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x100}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r7}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r10, r9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_delroute={0x70, 0x19, 0x800, 0x70bd27, 0x25dfdbff, {0x2, 0xac423ad0b72331ff, 0x20, 0x17, 0xfe, 0x3, 0x0, 0x5, 0x2800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_IIF={0x8}, @RTA_UID={0x8, 0x19, r2}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_IIF={0x8, 0x3, r5}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x3f, 0xf9, r7}}, @RTA_UID={0x8, 0x19, r9}, @RTA_SRC={0x8, 0x2, @local}, @RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000c0) 23:40:59 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1010c0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:40:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(0x0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sched_getscheduler(r1) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/udp\x00') write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0xffffffffffffffda, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r7}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r10, r9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_delroute={0x70, 0x19, 0x800, 0x70bd27, 0x25dfdbff, {0x2, 0xac423ad0b72331ff, 0x20, 0x17, 0xfe, 0x3, 0x0, 0x5, 0x2800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_IIF={0x8}, @RTA_UID={0x8, 0x19, r2}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_IIF={0x8, 0x3, r5}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x3f, 0xf9, r7}}, @RTA_UID={0x8, 0x19, r9}, @RTA_SRC={0x8, 0x2, @local}, @RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000c0) [ 354.095195][ T9789] validate_nla: 44 callbacks suppressed [ 354.095224][ T9789] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 354.109363][ T9789] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 354.180933][ T9792] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 354.189279][ T9792] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 354.197688][ T9792] __nla_validate_parse: 21 callbacks suppressed [ 354.197716][ T9792] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 354.230667][ T9794] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 354.238908][ T9794] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 354.247393][ T9794] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r7}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r10, r9, 0x0) 23:41:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 354.362937][ T9795] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 354.371464][ T9795] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 354.380759][ T9795] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 354.465085][ T9797] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 354.473665][ T9797] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 354.482008][ T9797] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) statx(r1, &(0x7f0000000140)='./file0\x00', 0x400, 0x400, &(0x7f0000000300)) r2 = gettid() setpgid(0x0, r2) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 354.609660][ T9800] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r7}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) [ 354.676458][ T9803] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 354.770804][ T9805] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x3d) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r5, &(0x7f0000000300), 0x128, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000040)=0x240, 0x4) splice(r2, 0x0, r4, 0x0, 0x100000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 354.894067][ T9807] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.998989][ T9809] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r7}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) 23:41:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 355.318308][ T9819] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r7}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) socket(0x10, 0x2, 0x0) 23:41:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r7}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) 23:41:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) 23:41:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000"], 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x10, 0x3, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) r9 = dup3(r7, r8, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r10, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r10, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f580a}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc8c0}, 0x4004000) 23:41:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0xb03}, 0x1c}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) 23:41:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x45e8690936ee46ae}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0xb03}, 0x1c}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) 23:41:02 executing program 0: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 23:41:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) 23:41:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0xb03}, 0x1c}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000000004476422d732f00", @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000"], 0x4c}}, 0x0) 23:41:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r4}, 0x3c) 23:41:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000500)="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", 0x1000) 23:41:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) 23:41:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:03 executing program 0: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="8dabccd2f28ef55100"/20, @ANYRES32=0x0, @ANYBLOB="000038e000000000130012800b00010062726964676500001c0002820c001f0000d9bf00000000000c001f000000000000000000"], 0x4c}}, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xa47f, 0x0) fcntl$notify(r4, 0x402, 0x80000018) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) 23:41:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) 23:41:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r8, r7, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x40, 0x1}, {0xed, 0x9}], r7}, 0x18, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvfrom$inet6(r3, &(0x7f00000000c0)=""/164, 0xa4, 0x40000000, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @mcast2, 0x7fffffff}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="000700000000924a1d2f7803ddf3fb173478290f672a97bc63afc75629225ec20d6d2b7e0a25b0d1dcbc8cb0d756c0dbfdad2e1468aee58528dc20ea7226cfd28ce36bf95d571a2ffe9e1ad2de67eaeca700f01d2d2a6218496cd32530e4132b039427fc11a540037fddcd9272b60990c584983fa06b2572ab5e6048aa07dbc951900e75f002207ca0016c3ed683b9f08fd5105392585c65b0cf0054ca1e100685781935437d65c8e0368e", @ANYRESOCT=r5, @ANYBLOB="62726964676500001c0002800c001f0000000000000000000c001f000000"], 0x4c}}, 0x0) 23:41:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) 23:41:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x9, 0x0, r2, 0x0) 23:41:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x9, 0x0, r2, 0x0) 23:41:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:04 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:41:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x9, 0x0, r2, 0x0) 23:41:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4cd239c16181452167a0000000100001041b8c4f", @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062704964676500001c0002800c001f00000000000000060000001f0040000000000000002fc7d4c6b9bc01522b9811d7d806db9a3a9cd65283fb412b265a4a0508c260138706d552b10dace6fd60b9dfd3c4dfd06e17131c6ab20fdad22c9de9aaf825e02ff4c753fc71602d4da54314c19832b8d469ae9f009e3725eef1c81689bc47e5bc3aeeb742aff64eedf3133427639d2479ab"], 0x4c}}, 0x0) 23:41:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) socket(0x10, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r1, 0x0, 0x0) [ 359.125694][ T9920] validate_nla: 74 callbacks suppressed [ 359.125722][ T9920] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 359.140249][ T9920] netlink: 'syz-executor.1': attribute type 31 has an invalid length. 23:41:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 359.283572][ T9925] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 359.292250][ T9925] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 359.300711][ T9925] __nla_validate_parse: 33 callbacks suppressed [ 359.300733][ T9925] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:05 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x1120, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x709c}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1e93}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}]}, @TIPC_NLA_NODE={0x1058, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "0bff7d198bfdf63d6a7d4e25319fc76c9cd022bb5ba3e778d691158786"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xde}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x1120}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = open(&(0x7f0000000100)='./file0\x00', 0x105240, 0x40) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/37, 0x25}], 0x1) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r10, 0xc0d58860b4c77945, 0x0, 0x0, {{}, {0x0, 0x4104}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}}}}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r10, 0x2, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000882}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 359.470759][ T9929] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 359.479676][ T9929] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 359.489682][ T9929] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) socket(0x10, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r1, 0x0, 0x0) 23:41:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000000)={0x0}) r8 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000000c0)={r7, 0x1, r10, 0xf57b}) [ 359.838713][ T9934] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 359.847306][ T9934] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 359.855887][ T9934] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.901777][ T9937] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 359.910227][ T9937] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 359.919580][ T9937] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 360.036763][ T9936] IPVS: ftp: loaded support on port[0] = 21 23:41:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 360.134819][ T9941] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) socket(0x10, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r1, 0x0, 0x0) [ 360.297522][ T9941] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 360.308218][ T9954] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 360.384949][ T9968] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 360.833826][ T9936] chnl_net:caif_netlink_parms(): no params data found [ 361.067459][ T9936] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.076170][ T9936] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.085846][ T9936] device bridge_slave_0 entered promiscuous mode [ 361.128239][ T9936] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.136127][ T9936] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.145945][ T9936] device bridge_slave_1 entered promiscuous mode [ 361.237228][ T9936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.253210][ T9936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.325261][ T9936] team0: Port device team_slave_0 added [ 361.337078][ T9936] team0: Port device team_slave_1 added [ 361.406730][ T9936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.414164][ T9936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.440327][ T9936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.483235][ T9936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.490806][ T9936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.517044][ T9936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.657312][ T9936] device hsr_slave_0 entered promiscuous mode [ 361.693036][ T9936] device hsr_slave_1 entered promiscuous mode [ 361.720225][ T9936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.727874][ T9936] Cannot create hsr debugfs directory [ 362.092997][ T9936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 362.167750][ T9936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 362.231507][ T9936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 362.297035][ T9936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 362.586015][ T9936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.635711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.645080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.662868][ T9936] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.701480][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.711794][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.721602][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.728911][ T8667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.769382][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.778927][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.788989][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.798430][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.805750][ T8667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.816910][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.827982][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.850453][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.861239][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.912075][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 362.922022][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.933645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.944511][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.954305][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.964027][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 362.974193][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.002448][ T9936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.087583][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.096079][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.123300][ T9936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.180110][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.190551][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.246480][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.256470][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.280104][ T9936] device veth0_vlan entered promiscuous mode [ 363.302176][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.312271][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.330880][ T9936] device veth1_vlan entered promiscuous mode [ 363.395058][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.404914][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.414585][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.424782][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.446764][ T9936] device veth0_macvtap entered promiscuous mode [ 363.470333][ T9936] device veth1_macvtap entered promiscuous mode [ 363.546539][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.558368][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.568428][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.579050][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.589099][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.599709][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.614174][ T9936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.622927][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 363.633151][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.642829][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.653069][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.677524][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.688655][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.698675][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.709288][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.719355][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.729999][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.744249][ T9936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.754133][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 363.764508][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 363.992049][T10158] FAULT_INJECTION: forcing a failure. [ 363.992049][T10158] name failslab, interval 1, probability 0, space 0, times 0 [ 364.005004][T10158] CPU: 1 PID: 10158 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 364.013739][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.023856][T10158] Call Trace: [ 364.027231][T10158] dump_stack+0x1df/0x240 [ 364.031649][T10158] should_fail+0x8b7/0x9e0 [ 364.036156][T10158] __should_failslab+0x1f6/0x290 [ 364.041173][T10158] should_failslab+0x29/0x70 [ 364.045871][T10158] kmem_cache_alloc_node+0xfd/0xed0 [ 364.051159][T10158] ? __alloc_skb+0x208/0xac0 [ 364.055837][T10158] __alloc_skb+0x208/0xac0 [ 364.060363][T10158] netlink_sendmsg+0x7d3/0x14d0 [ 364.065336][T10158] ? netlink_getsockopt+0x1440/0x1440 [ 364.070796][T10158] ____sys_sendmsg+0x1370/0x1400 [ 364.075846][T10158] __sys_sendmsg+0x623/0x750 [ 364.080555][T10158] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 364.086722][T10158] ? kmsan_get_metadata+0x11d/0x180 [ 364.092019][T10158] ? kmsan_get_metadata+0x11d/0x180 [ 364.097307][T10158] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 364.103223][T10158] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 364.109487][T10158] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 364.115507][T10158] __se_sys_sendmsg+0x97/0xb0 [ 364.120306][T10158] __x64_sys_sendmsg+0x4a/0x70 [ 364.125192][T10158] do_syscall_64+0xb0/0x150 [ 364.129840][T10158] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 364.135824][T10158] RIP: 0033:0x45c1d9 [ 364.139753][T10158] Code: Bad RIP value. [ 364.143915][T10158] RSP: 002b:00007fc674e3bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.152425][T10158] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c1d9 [ 364.160480][T10158] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 364.168529][T10158] RBP: 00007fc674e3bca0 R08: 0000000000000000 R09: 0000000000000000 [ 364.176597][T10158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.184641][T10158] R13: 0000000000c9fb6f R14: 00007fc674e3c9c0 R15: 000000000078bf0c 23:41:10 executing program 3 (fault-call:1 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:41:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x26}]}, 0x28}}, 0x0) 23:41:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) [ 364.503189][T10163] validate_nla: 8 callbacks suppressed [ 364.503221][T10163] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 364.518202][T10163] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 364.526428][T10163] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.557160][T10168] FAULT_INJECTION: forcing a failure. [ 364.557160][T10168] name failslab, interval 1, probability 0, space 0, times 0 [ 364.572364][T10168] CPU: 0 PID: 10168 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 364.581130][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.591261][T10168] Call Trace: [ 364.594657][T10168] dump_stack+0x1df/0x240 [ 364.599097][T10168] should_fail+0x8b7/0x9e0 [ 364.603627][T10168] __should_failslab+0x1f6/0x290 [ 364.608651][T10168] should_failslab+0x29/0x70 [ 364.613350][T10168] __kmalloc_node_track_caller+0x1c3/0x1200 [ 364.619360][T10168] ? kmem_cache_alloc_node+0x1b0/0xed0 [ 364.624938][T10168] ? netlink_sendmsg+0x7d3/0x14d0 [ 364.630109][T10168] ? netlink_sendmsg+0x7d3/0x14d0 [ 364.635221][T10168] __alloc_skb+0x2fd/0xac0 [ 364.639730][T10168] ? netlink_sendmsg+0x7d3/0x14d0 [ 364.644863][T10168] netlink_sendmsg+0x7d3/0x14d0 [ 364.649852][T10168] ? netlink_getsockopt+0x1440/0x1440 [ 364.655344][T10168] ____sys_sendmsg+0x1370/0x1400 [ 364.660494][T10168] __sys_sendmsg+0x623/0x750 [ 364.665231][T10168] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 364.671409][T10168] ? kmsan_get_metadata+0x11d/0x180 [ 364.676702][T10168] ? kmsan_get_metadata+0x11d/0x180 [ 364.681991][T10168] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 364.687894][T10168] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 364.694145][T10168] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 364.700184][T10168] __se_sys_sendmsg+0x97/0xb0 [ 364.704977][T10168] __x64_sys_sendmsg+0x4a/0x70 [ 364.709862][T10168] do_syscall_64+0xb0/0x150 [ 364.714494][T10168] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 364.720633][T10168] RIP: 0033:0x45c1d9 [ 364.724568][T10168] Code: Bad RIP value. [ 364.728684][T10168] RSP: 002b:00007fc674e3bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.737185][T10168] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c1d9 [ 364.745240][T10168] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 364.753284][T10168] RBP: 00007fc674e3bca0 R08: 0000000000000000 R09: 0000000000000000 [ 364.761326][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.769385][T10168] R13: 0000000000c9fb6f R14: 00007fc674e3c9c0 R15: 000000000078bf0c 23:41:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:10 executing program 3 (fault-call:1 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:41:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964676500001c0002800c001f0000000000000000000c00"/52], 0x4c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x44, r2, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x42}]}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "184a63b844a4dcc95260fb90bfd0ead81d1be10f72013411dab18123ee394f8110fee5044845a8f9e05240c4c573bc6290b633f06c7c7695f5a5567c2d4d5a3e74094397e8b14cbeb4d4d95fe338fd3b768d8dca092c5f0ad5538b170fa09a6a44ec6b487f65d7bce9cc9d9e2a42a901a73870a0a2fbc429628aefe75ef531d096fb42232d87e1d004628bbcb4d66008717abfe2de8bc4479a6a2b251a55487612926a6d0e52c32c966f15207494bb93587ec0cae2a227c176c23340a3b490e20acfc67bce997e5b733bfe95d1f3c484ca4797ab65c6dd6912605c4f3759c1b95577302f146415c1f3bb83fd2c4a76c1c53266057a33"}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "989762ad5b3a9533662c169e2857f1d2a5406731e19cba4bdde24bcecca217e2327cfc7e7a211aeb447fbe7b29650609f3"}, @ETHTOOL_A_BITSET_BITS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '/dev/kvm\x00'}]}]}]}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x80045) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={r8, 0x4, 0x8}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r9, 0xfff}, 0x8) 23:41:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) [ 365.004748][T10172] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 365.013881][T10172] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 365.022318][T10172] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 365.119369][T10175] FAULT_INJECTION: forcing a failure. [ 365.119369][T10175] name failslab, interval 1, probability 0, space 0, times 0 [ 365.133109][T10175] CPU: 0 PID: 10175 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 365.142807][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.152935][T10175] Call Trace: [ 365.157193][T10175] dump_stack+0x1df/0x240 [ 365.161635][T10175] should_fail+0x8b7/0x9e0 [ 365.166159][T10175] __should_failslab+0x1f6/0x290 [ 365.171184][T10175] should_failslab+0x29/0x70 [ 365.175889][T10175] kmem_cache_alloc+0xd0/0xd70 [ 365.180747][T10175] ? skb_clone+0x328/0x5d0 [ 365.185282][T10175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 365.191440][T10175] ? rhashtable_jhash2+0x3ac/0x4d0 [ 365.196652][T10175] ? kmsan_get_metadata+0x11d/0x180 [ 365.201947][T10175] skb_clone+0x328/0x5d0 [ 365.206316][T10175] netlink_deliver_tap+0x77d/0xe90 [ 365.211542][T10175] ? kmsan_set_origin_checked+0x95/0xf0 [ 365.217214][T10175] netlink_unicast+0xe87/0x1100 [ 365.222185][T10175] netlink_sendmsg+0x1246/0x14d0 [ 365.227268][T10175] ? netlink_getsockopt+0x1440/0x1440 [ 365.232740][T10175] ____sys_sendmsg+0x1370/0x1400 [ 365.237798][T10175] __sys_sendmsg+0x623/0x750 [ 365.242511][T10175] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 365.248679][T10175] ? kmsan_get_metadata+0x11d/0x180 [ 365.253978][T10175] ? kmsan_get_metadata+0x11d/0x180 [ 365.259298][T10175] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 365.265223][T10175] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 365.271477][T10175] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 365.277478][T10175] __se_sys_sendmsg+0x97/0xb0 [ 365.282280][T10175] __x64_sys_sendmsg+0x4a/0x70 [ 365.287146][T10175] do_syscall_64+0xb0/0x150 [ 365.291779][T10175] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 365.297750][T10175] RIP: 0033:0x45c1d9 [ 365.301684][T10175] Code: Bad RIP value. [ 365.305803][T10175] RSP: 002b:00007fc674e3bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.314304][T10175] RAX: ffffffffffffffda RBX: 000000000002af00 RCX: 000000000045c1d9 [ 365.322339][T10175] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 365.330381][T10175] RBP: 00007fc674e3bca0 R08: 0000000000000000 R09: 0000000000000000 [ 365.338418][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.346468][T10175] R13: 0000000000c9fb6f R14: 00007fc674e3c9c0 R15: 000000000078bf0c 23:41:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 365.475135][T10179] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 365.483518][T10179] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 365.491927][T10179] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) [ 365.660955][T10181] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 365.669597][T10181] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 365.678040][T10181] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 365.774699][T10183] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 365.783309][T10183] netlink: 'syz-executor.2': attribute type 31 has an invalid length. [ 365.791696][T10183] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 365.955028][T10188] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) 23:41:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_newroute={0x1028, 0x18, 0xb03, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@RTA_IIF={0x8}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}]}, 0x1028}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x100, &(0x7f0000000080)) [ 366.132705][T10177] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.171035][T10190] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.254457][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.264104][T10177] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:12 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@getrule={0x14, 0x22, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}}, 0x40008c0) socket(0x1f, 0x80000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000011000/0x1000)=nil) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_ARM_SET_DEVICE_ADDR(r6, 0x4010aeab, &(0x7f00000012c0)={0x8, 0x2000}) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_STAT(r3, 0xd, &(0x7f00000002c0)=""/4096) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="040028bd7000ffdbdf2502000000140003002001000000000000000000000000000008000400ac1414bb08000400ac1e010114000300fe8800000000000000000000000000011400030000000000000000000000ffffe00000012a00070073797374656d5f753a6f626a65637465766963655f743a733000"/134], 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x11) 23:41:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000003b00)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f00000001c0)=""/254, 0xfe}], 0x3}, 0x2}, {{&(0x7f0000000380)=@rc={0x1f, @none}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000400)=""/86, 0x56}], 0x5, &(0x7f0000000940)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000001940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f00000019c0)=""/207, 0xcf}, {&(0x7f0000001ac0)=""/128, 0x80}, {&(0x7f0000001b40)=""/71, 0x47}, {&(0x7f0000001bc0)=""/199, 0xc7}, {&(0x7f0000001cc0)=""/255, 0xff}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000001dc0)=""/120, 0x78}], 0x7, &(0x7f0000001ec0)=""/164, 0xa4}, 0x6}, {{&(0x7f0000001f80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000002000)=""/67, 0x43}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/15, 0xf}, {&(0x7f00000030c0)=""/249, 0xf9}, {&(0x7f00000031c0)=""/80, 0x50}, {&(0x7f0000003240)=""/150, 0x96}, {&(0x7f0000003300)=""/4, 0x4}, {&(0x7f0000003340)=""/57, 0x39}, {&(0x7f0000003380)=""/247, 0xf7}, {&(0x7f0000003480)=""/235, 0xeb}], 0xa, &(0x7f0000003640)=""/150, 0x96}, 0xb9b3}, {{&(0x7f0000003700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003780)=""/98, 0x62}, {&(0x7f0000003800)=""/115, 0x73}, {&(0x7f0000003880)=""/248, 0xf8}, {&(0x7f0000003980)=""/76, 0x4c}, {&(0x7f0000003a00)=""/53, 0x35}], 0x5, &(0x7f0000003ac0)=""/57, 0x39}, 0x7}], 0x5, 0x2020, &(0x7f0000003c40)={0x77359400}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003cc0)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000003d00)=@sack_info={r8, 0x6dd, 0xb98}, &(0x7f0000003d40)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000003c80)={r4, 0x8, 0x4, [0x7, 0xc924, 0x8c6, 0x8]}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:12 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r6, 0x5, 0x9, 0x1}, 0x10) r7 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r9, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000300)={0x500, r10, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4145}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2614}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa5c54aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23c7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13796da4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x653c9ea0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2988b201}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x625c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30355310}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c4a2824}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15f4a3da}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1232ef73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db0c61a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69804cb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24f51bc1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40ea530b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x16c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaaea}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ef36995}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb20b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x137256da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e4b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15ce92ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc44b}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f74f6f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd49a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c94469a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ba7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17bbf777}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb870}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9291}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x656df23b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ed8d10e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x188a87e3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe7dff94}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55f2266b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacc9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x373f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54829d6c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26e0bbe9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2aa45587}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52a2c89b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd623}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a522450}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x119b3c00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e84bc2b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67f10aaf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe91e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18b8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe3a913a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28e28d2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6895370d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a787dcc}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x345c243d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62c9dcf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ea39e3b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6954aa5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ebe9784}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4902ed6}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cecbfef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7825adfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x323c726}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x751177b4}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x670cf1b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72cbd0fa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd8, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ef65481}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fb27c4b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28a7cf9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1abde48e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x479130ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25d738a6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c3b48a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d9793b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eaab864}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c6a5f89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a2fe57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x662ac2dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaebb3b7}]}]}]}, 0x500}, 0x1, 0x0, 0x0, 0x11}, 0x4040) 23:41:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:13 executing program 2: r0 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800030b00000000000000000a00000000000000000000000802170000000000"], 0x24}}, 0x0) 23:41:13 executing program 2: r0 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvfrom$l2tp6(r3, &(0x7f0000000500)=""/4096, 0x1000, 0x40000141, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r5 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000240)={@initdev, @private, 0x0}, &(0x7f00000012c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'erspan0\x00', &(0x7f00000013c0)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0xfff, 0x7, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x66, 0x0, 0x5, 0x4, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x24, 0x9e, 0x0, 0xc, [0x9, 0x80000001, 0x1a6, 0x2, 0x9, 0x3ff, 0x7fff, 0x9]}, @ssrr={0x89, 0x13, 0x19, [@empty, @multicast2, @multicast1, @private=0xa010100]}]}}}}}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r11}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r11}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000001540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x54, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) socket$inet6(0xa, 0x80000, 0x800) 23:41:14 executing program 2: r0 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @remote}}, 0x1, 0x42c, 0x9dd7, 0x72fc, 0x2, 0x80000000, 0x7}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:41:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x410000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x0, r6}) 23:41:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:14 executing program 2: r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) 23:41:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:14 executing program 2: r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = dup3(r2, r3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x1070, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfa}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7c}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}]}, 0x1070}, 0x1, 0x0, 0x0, 0x810}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:15 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800030b000000020008001700"/36], 0x24}}, 0x0) 23:41:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:15 executing program 2: r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$IMGETVERSION(r6, 0x80044942, &(0x7f00000000c0)) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="ddaa411f19e16e363db0a4126760000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b000100627269912877d332551fd9800c001f0000000000000046000c001f000000000000000000"], 0x4c}}, 0x0) [ 369.603360][T10277] validate_nla: 36 callbacks suppressed [ 369.603387][T10277] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 369.617548][T10277] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 369.625768][T10277] __nla_validate_parse: 16 callbacks suppressed [ 369.625798][T10277] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:15 executing program 2: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r1, r0, 0x0) 23:41:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r2}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r2}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x2000, 0x1, 0x86de, 0x8000, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800030b00000000000000000a000000000000000000000008000300", @ANYRES32=r2, @ANYBLOB="c0a8438dafe8a1b1895e3ff78f824089e7580f7a287bbefbbb34d78308d339ef0c853a7ed9773fb8e0147bc3997e6dfd889ab770060000000000000054a0cbbd234b4a290246182bd8c5b235410d9593fc77f59132d152003ae33c8b24d8aae6a6e887e46a8e3cf693d08cd79ff07a63f22a78fe1d25b13894"], 0x24}}, 0x40800) 23:41:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726954e523e1bd77a79f800c001f0000000000000000000c001f00000000000000000087f46f5c09"], 0x4c}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x9, 0xe000) fcntl$setown(r1, 0x8, 0xffffffffffffffff) 23:41:16 executing program 2: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r1, r0, 0x0) [ 370.223774][T10289] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 370.232179][T10289] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 370.240737][T10289] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.267726][T10291] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 370.276093][T10291] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 370.284547][T10291] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 370.403503][T10291] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 370.412445][T10291] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 370.420872][T10291] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:16 executing program 2: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r1, r0, 0x0) 23:41:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00e6000000000000130012800b00010062726970fb6500001c0002800c001f0000000000000000000c001f00000000dd6fb35718"], 0x4c}}, 0x0) [ 370.681860][T10299] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 370.690484][T10299] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 370.698879][T10299] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:16 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r1, 0x0, 0x0) [ 370.882532][T10303] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:17 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000000400"/17, @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000"], 0x4c}}, 0x10) [ 371.148407][T10309] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:17 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r1, 0x0, 0x0) 23:41:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) socket$key(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdc00, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vxcan1\x00'}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffc0, 0x1}}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bond\x00'}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge_slave_1\x00') sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000d130012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000"], 0x4c}}, 0x0) [ 371.525584][T10317] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:17 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r1, 0x0, 0x0) 23:41:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 371.772627][T10320] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 371.865539][T10323] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:17 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:18 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@getroute={0x14, 0x1a, 0x400, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r6, r5, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(0x0, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sched_getscheduler(r7) r8 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB='\b\x00*\x00', @ANYRES32, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB], 0x5b0}}, 0x80) 23:41:18 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socket$kcm(0x10, 0x800000000002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x5) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={0x0, r11}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x3, r11, 0x0, 0x0, 0x1}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000104000000000000000000000000aacbb96e7cb72cc652e50b41e0936146d45ffda2342a5cad53f5638920686e7279a435ac2dc7cf7d4e18883f600b8d14de47174d7a4cb240cdfb029bf876bef93691e94922b20ac95ff28a5bad82a92e611ae7fc4b459c6b16614f1b58fac0e9c0478d7e829bfd0aa91f000c2ba8b1a4fdf0d1e2bc431c7e0e0a7cd2fe983de12d07b3d4f36d3e998d8932070409eac664e6d69ae5be71db2e83bb229d65a962f560aab85ed540f9e4b37e909713f729499d5b36ce885b", @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000"], 0x4c}}, 0x0) 23:41:18 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:19 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:19 executing program 0: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0xa30000, 0xe7a9, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x990a76, 0x2a7b, [], @value64=0x5}}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000410000000e0001006e657464657673696d000000280002006e657464657673696d30"], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r4, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x200400c0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:19 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0xc, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8, 0x2, 0x9d}]}}}]}, 0x3c}}, 0x0) 23:41:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x84800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x44040) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x48810) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, r4, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getnetconf={0x14, 0x52, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x0) 23:41:19 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:20 executing program 0: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x2, 0x9883edf0, 0x1, @discrete={0xa, 0x8}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000100001040000000000000000000000002305f6492da9cc9e85cd69f041f191415b93e0a8f76bc3074e935ddfb9df6ae1cbe037242a3f9a08985f67ea143f3dea34bdb160a180e3d21e9d8cbd5c2d2c0f70", @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000"], 0x4c}}, 0x0) 23:41:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400fa85ce3d0070e2137ee35d74e0ffffff00000a0000010000000000cc44a12153f389"], 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x1f) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x1) r3 = fcntl$dupfd(r1, 0x0, r2) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000040)={0x6a, 0x8, 0x1}) 23:41:20 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:20 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) [ 374.610303][T10392] validate_nla: 28 callbacks suppressed [ 374.610332][T10392] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 374.624753][T10392] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 374.633109][T10392] __nla_validate_parse: 12 callbacks suppressed [ 374.633136][T10392] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:20 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x0, 0x0, 0xfffffffd, 0x7, 0x0, 0x9, 0x14}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000500)={r3}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964676500001c0002800c001f0000000000000000000c001f00000000000000f600"], 0x4c}}, 0x0) 23:41:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x44, r3, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x42}]}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "184a63b844a4dcc95260fb90bfd0ead81d1be10f72013411dab18123ee394f8110fee5044845a8f9e05240c4c573bc6290b633f06c7c7695f5a5567c2d4d5a3e74094397e8b14cbeb4d4d95fe338fd3b768d8dca092c5f0ad5538b170fa09a6a44ec6b487f65d7bce9cc9d9e2a42a901a73870a0a2fbc429628aefe75ef531d096fb42232d87e1d004628bbcb4d66008717abfe2de8bc4479a6a2b251a55487612926a6d0e52c32c966f15207494bb93587ec0cae2a227c176c23340a3b490e20acfc67bce997e5b733bfe95d1f3c484ca4797ab65c6dd6912605c4f3759c1b95577302f146415c1f3bb83fd2c4a76c1c53266057a33"}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "989762ad5b3a9533662c169e2857f1d2a5406731e19cba4bdde24bcecca217e2327cfc7e7a211aeb447fbe7b29650609f3"}, @ETHTOOL_A_BITSET_BITS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '/dev/kvm\x00'}]}]}]}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x585}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x24004000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:41:20 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, 0x0, r1, 0x0) [ 374.984250][T10398] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 374.992704][T10398] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 375.001167][T10398] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 375.218444][T10398] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 375.226822][T10398] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 375.235041][T10398] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:21 executing program 3: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:41:21 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, 0x0, r1, 0x0) [ 375.364107][T10408] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 375.372527][T10408] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 375.381047][T10408] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:21 executing program 0: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000280)={0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x7fff, 0x0, 0x8001, 0x4, 0x7, 0xff], 0x6, 0x81800, 0x0, r3}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r8, 0x5, 0x30, 0x1000, 0xefc4}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x6d3f, 0x4000, 0x7, 0x6, 0xff, 0x2, 0xd273, r9}, 0x20) 23:41:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000080)) 23:41:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:21 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, 0x0, r1, 0x0) [ 375.811355][T10416] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 375.820339][T10416] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 375.828754][T10416] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.863259][T10418] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:22 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r1, 0x0, 0x0) 23:41:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xe, {0x9, 0x3, 0x9b, 0xc9, "92041805c1224899248c4b2722fca0bfa5c6717447a61b1152f4ba9ea76a71076b842261799f0e589cbf557bb25304ac863f11fa66a2c4954217a285aa07b5ddde015c9ba9fa098158d6a68e328edde8a3d069f816285c7678792fc6dd6c6e5d262fad9b7d5240cd1252d012b0dcffa4eca6c932559e9cfa8f99cc15a087bdb65ec7d1002b97874ea2d2f85dfd7e32888bd3c361cbb1fb4014fdf01bf4799049c0ca1ad5a8371ddf50e09730b84306d9f69f8a5b5c1658daf3e82871defffa2b8b27e06947f6fabb1d"}}, 0xd5) [ 376.251091][T10428] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 376.454367][T10433] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:22 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r1, 0x0, 0x0) [ 376.508775][T10433] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.599240][T10436] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) r3 = fcntl$dupfd(r2, 0x0, r0) sendto$packet(r3, &(0x7f0000000500)="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", 0x1000, 0x20004800, &(0x7f0000000000)={0x11, 0x8, 0x0, 0x1, 0x61, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:22 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) r1 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a5", 0xb1}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8}], 0x1, 0x0) r3 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a5", 0xb1}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8}], 0x1, 0x0) r5 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a5", 0xb1}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8}], 0x1, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a5", 0xb1}], 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r8, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8}], 0x1, 0x0) r10 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a5", 0xb1}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8}], 0x1, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x1}], {0x4, 0x4}, [{0x8, 0x0, r0}, {0x8, 0x1, r2}, {0x8, 0x4, r4}, {0x8, 0x3, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r9}, {0x8, 0x1, r11}], {}, {0x20, 0x4}}, 0x74, 0x0) socket$nl_route(0x10, 0x3, 0x0) 23:41:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:22 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r1, 0x0, 0x0) 23:41:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x300, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='ipvlan0\x00', 0x9, 0x8, 0xd22}) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000080)) setsockopt$inet_dccp_int(r3, 0x21, 0x1, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:41:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0xc, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8, 0x2, 0x9d}]}}}]}, 0x3c}}, 0x0) 23:41:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0084001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000"], 0x4c}}, 0x0) 23:41:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040)={0x7b2f}, 0x4) 23:41:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r6, 0x5, 0x9, 0x1}, 0x10) r7 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r9, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000300)={0x500, r10, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4145}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2614}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa5c54aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23c7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13796da4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x653c9ea0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2988b201}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x625c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30355310}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c4a2824}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15f4a3da}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1232ef73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db0c61a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69804cb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24f51bc1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40ea530b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x16c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaaea}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ef36995}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb20b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x137256da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e4b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15ce92ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc44b}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f74f6f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd49a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c94469a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ba7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17bbf777}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb870}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9291}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x656df23b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ed8d10e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x188a87e3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe7dff94}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55f2266b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacc9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x373f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54829d6c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26e0bbe9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2aa45587}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52a2c89b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd623}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a522450}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x119b3c00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e84bc2b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67f10aaf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe91e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18b8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe3a913a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28e28d2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6895370d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a787dcc}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x345c243d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62c9dcf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ea39e3b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6954aa5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ebe9784}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4902ed6}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cecbfef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7825adfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x323c726}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x751177b4}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x670cf1b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72cbd0fa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd8, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ef65481}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fb27c4b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28a7cf9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1abde48e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x479130ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25d738a6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c3b48a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d9793b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eaab864}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c6a5f89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a2fe57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x662ac2dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaebb3b7}]}]}]}, 0x500}, 0x1, 0x0, 0x0, 0x11}, 0x4040) 23:41:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000280)={0xd, 0x7, 0x1, {{}, 0x7fffffff}}, 0xd) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000380)={0x7, 0x7, 0x4}, &(0x7f00000003c0)=0x28) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x61103, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000300), 0x4) pwrite64(r4, &(0x7f0000000000)="be8fb564bed8693bfe924d123247683dace9a10565179bb567158c2a0181df8b9397db508f62a1618ad2c2e738d47c5f2991a64783e08fe57b00c23cae23f86a02832ee6453ba0806937cd01ee", 0x4d, 0xdac) 23:41:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:23 executing program 2 (fault-call:3 fault-nth:0): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:23 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) fcntl$notify(r0, 0x402, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 378.057529][T10476] FAULT_INJECTION: forcing a failure. [ 378.057529][T10476] name failslab, interval 1, probability 0, space 0, times 0 [ 378.070440][T10476] CPU: 0 PID: 10476 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 378.079180][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.089317][T10476] Call Trace: [ 378.093387][T10476] dump_stack+0x1df/0x240 [ 378.097795][T10476] should_fail+0x8b7/0x9e0 [ 378.102294][T10476] __should_failslab+0x1f6/0x290 [ 378.107324][T10476] should_failslab+0x29/0x70 [ 378.112086][T10476] kmem_cache_alloc_trace+0xf3/0xd70 [ 378.117464][T10476] ? kmsan_get_metadata+0x4f/0x180 [ 378.122667][T10476] ? assoc_array_delete+0xee/0x2430 [ 378.127964][T10476] ? kmsan_internal_set_origin+0x75/0xb0 [ 378.133685][T10476] ? security_key_permission+0x1cd/0x200 [ 378.139394][T10476] ? kmsan_get_metadata+0x11d/0x180 [ 378.144664][T10476] assoc_array_delete+0xee/0x2430 [ 378.149768][T10476] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 378.155941][T10476] ? kmsan_set_origin_checked+0x95/0xf0 [ 378.161585][T10476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 378.167491][T10476] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 378.173765][T10476] key_unlink+0x121/0x2b0 [ 378.178204][T10476] keyctl_keyring_unlink+0x278/0x360 [ 378.183585][T10476] __se_sys_keyctl+0x1f7/0x1d60 [ 378.188527][T10476] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 378.194759][T10476] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 378.200736][T10476] ? kmsan_get_metadata+0x4f/0x180 [ 378.205930][T10476] ? kmsan_set_origin_checked+0x95/0xf0 [ 378.211557][T10476] __x64_sys_keyctl+0x62/0x80 [ 378.216344][T10476] do_syscall_64+0xb0/0x150 [ 378.220948][T10476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 378.226905][T10476] RIP: 0033:0x45c1d9 [ 378.230828][T10476] Code: Bad RIP value. [ 378.234935][T10476] RSP: 002b:00007f791ef7ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 378.243425][T10476] RAX: ffffffffffffffda RBX: 000000000001dec0 RCX: 000000000045c1d9 [ 378.251455][T10476] RDX: 00000000ffffffff RSI: 000000003b680d7b RDI: 0000000000000009 [ 378.259517][T10476] RBP: 00007f791ef7aca0 R08: 0000000000000000 R09: 0000000000000000 [ 378.267578][T10476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.275616][T10476] R13: 0000000000c9fb6f R14: 00007f791ef7b9c0 R15: 000000000078bf0c 23:41:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:25 executing program 2: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000000)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7fffffff, 0x0, [], 0x9, 0xa}) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f0000000080)="0d2968d0c1428e5f7d79dd8a9ea3c6c684c3") getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 23:41:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x2, 0x0, {0xa, 0x20}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r3}, 0x3c) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r3}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="447000fbdbdf2500"/20, @ANYRES32=r3, @ANYBLOB="01000a00010006000c00010008000e0000ffffff08000d000400000008000d00ffffffff0600050000070000"], 0x44}, 0x1, 0x0, 0x0, 0x881}, 0x4000000) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000240)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r3, 0x29, 0x1f, 0x1, 0x401, 0x30, @ipv4={[], [], @multicast1}, @remote, 0x20, 0x8000, 0x4, 0x8eb7}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003c40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003c00)={&(0x7f0000000680)=@newtaction={0x355c, 0x30, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{0x160, 0x1, [@m_skbedit={0x108, 0x15, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xffff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x2}}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0xb2, 0x6, "cb0ba366aff5b10ccf182b3ed89eb4db2885e76a903c9ecf330ceea1f22c9dd848a7fbe463f8b548ab5d1a03c673b6b2f5912cb50e18c214857bc3d7448c8beab9dd834146b3f60bff847204e13db28bc298fc7120333755bd87b37a7b43a52c3b43972a4df50ed29eb6f0674fcdf3beefad879440d98eb2309a62306fa74f06c5e869984f42be755bbdde6e47a0d80dbc1d46d94fcb93ca5d0f5335e905731ad7544a58ae09c8a9cdf9b34e71b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x54, 0xa, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xd9}]}, {0xc, 0x6, "f04c816db0d0b5a7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x3d0, 0x1, [@m_mirred={0x190, 0xd, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0xffffffff, 0x20000000, 0x9, 0x800}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0xff, 0x7, 0xbdee, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x5, 0x8001, 0x100}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x5, 0x20000000, 0x101, 0x3f}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xdae, 0xd06fc529dabb1740, 0x1, 0xfffffffa}, 0xb22fed440760377}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x5, 0x0, 0x9, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x63, 0x8, 0x0, 0x3, 0x1}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x80000000, 0x10000000, 0x6, 0x1}, 0x2}}]}, {0x62, 0x6, "e7b6ae36bd97e0d5f4b6843b1c62057db91be867bd7f53961aaf27abf361d17fdcd3af2d0efe01c92b4046d683a7f31d6258681a0394b28f2eb2722ab88ed5c5968c6ea77811eea4343bd6ddb4607c0f5a90fc90bc89a9103ba613a452ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x1a0, 0x11, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7b9c, 0x4, 0x8, 0x3}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0x800, 0x8, 0xff, 0x2}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0x21, 0x6, 0x7, 0x30f9}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x20, 0x0, 0x0, 0xfff}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x0, 0x7f, 0x9}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff13, 0x6, 0x5, 0x800, 0x8}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x10000000, 0x8, 0x7}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3ca7, 0x6, 0x2, 0x8}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x200, 0x6, 0xfffffff8, 0x6}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0xd0c, 0x2, 0x1, 0x7fffffff}, 0x78}}]}, {0x59, 0x6, "0fdae088f803e0703b603f3128dd95aa341f554231e320050b40d48645a2fee36b4ea188dad9cc060b4124bd587dddec327b9df685378d15bd272e01d5d60f3f66d67f34117d3ce8c075c68088a60a9a7f11f81434"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mpls={0x9c, 0x7, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x66, 0x6, "f02d1278836826dfa46f08f136c036bdd98964ab89f947b91e14714f556417dab7c2689df9bc4776182c53a06f9a71a73ea7d3ee969b58ce00b8f0720d71bc17fe2733b8733c051e6d68ea2971e2208b12ad8eb386c76c7ca87051e5a86c1a609da1"}, {0xc, 0x7, {0xf181e8e09b4a3eb0}}, {0xc, 0x8, {0x4, 0x1}}}}]}, {0x294, 0x1, [@m_mirred={0x150, 0x15, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc05c, 0x4c, 0x5, 0x1, 0xfffff09e}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0xff, 0x3, 0xffffff37}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1a7, 0x3, 0x5, 0x5, 0x6}, 0x1, r3}}]}, {0xc2, 0x6, "70e8d5d649c572cdad4daf062af3e5cb3b5dba77a0aee9f0316e1ca5c1dd0f37768e844927388b81425ce69792a8f80a321ad08c1331fbaf7ecd3c7cf9c00f6d53c87177be7404421edc29ce39a0f75741817fd970523ba8e69e92e931d9ef6f17c53045bd61b992db755b8c1f9198184f28812f8f9a1234673fa231634f782dab99b834a4c860ca633ca326d3c1dd5e800fdfbb73a83e5babf03734b344a4b7597dc246a32146819faedf2c686b5ad05b3d138aec55f80ac93c1b592798"}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}, @m_skbmod={0x140, 0xf, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0xfa, 0x6, "7395c7f7d06f9f37427821e1eb8261583e70a5173cb53fe6c660b0be559f094470e7670704a3bd7209d9b8c6fade2c7e066faea3ad96fd5632044f37b2060866286c00fc686f3f49eeb5d70e948681e4b4c49271aa09059bb15a2c0a04cf3506a0ddcfe31837833b554b398c100d3e25d19d8014da485bcd22beb9b6bae67aa5d4b84db6e7a990423776b2d7998afd07e9e010ddf782049128ac62e244f03f3fc9042d5b266e6ca7edf85f231cf1269a13d287b5a1ca94585c5989c19491f7a17de50709255119856bcce8c2b220ac1d3896fdc7cf20003c8ca2b4ec9bf5031e71eef8affe2e383ac28ee2e8631b099d67744b94f007"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x126c, 0x1, [@m_gact={0xa4, 0x19, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x800, 0x10000000, 0x9d, 0x10000}}]}, {0x5e, 0x6, "0f308f96256767be47d5b48acd005234dd45196583b01b9557665d5c1ec271c1dfee751ac9ebd08b738ed6cf68cc832425890246e3069f0a01bb7bed232fb921503e312003a364c4cab09105ac13f9b9589d81dc6876e94c36e3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x1084, 0x1e, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7fff, 0x8, 0x3, 0xac94}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x1, 0x800, 0x882f}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffa, 0x8, 0x81, 0x4}, 0x56}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x140, 0x1b, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x2, 0x1, 0x3, 0xa0f}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x7, 0x100, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x7fffffff, 0x8, 0x10001, 0x4b31}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0xff, 0xffffffffffffffff, 0x1f, 0x401}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xa54d, 0x3, 0x7, 0x5}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x5, 0xffffffffffffffff, 0x8001, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1ff, 0x10000000, 0xde, 0x4}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xe8, 0x5, 0x8f, 0x1}, 0x2, r6}}]}, {0x14, 0x6, "faf031abeb131c59fb1d0eebeddcef03"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x3b0, 0x1, [@m_bpf={0x58, 0x822, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}]}, {0x7, 0x6, "e925f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x7}}}}, @m_simple={0x150, 0x1d, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '--\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xd9, 0x4, 0x80, 0x8001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5a75919, 0x4, 0x8, 0x5, 0x8ec}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x4, 0x3, 0x4, 0x5}}, @TCA_DEF_DATA={0xb, 0x3, '\'@##\xd5*\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xcb2, 0x5, 0x3, 0x0, 0x7}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xa6, 0x6, "f23115fd127cfe8ad0c680989f298163028469ba25e00ebd40ba15c44f5362e574d7190608120c4693fdb989bac5a672477d77957498755402bfd5254f91da7b9dd5ddc3dfdcedf662eaa50a95470921b0ce07dbde3236700b223843d6a29c65e228c9aae5fb2e582055fcc705eaea918fb186a92eca9d5a090b6c486dc43355282d6718d9521f0a9445f9ccb0d737bfbf1c3cebb6b41f80bd2cec6954da0c19e5e5"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x204, 0xc, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x100, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0xf2, 0x6, {0x40, 'filter\x00', 0x6, 0x40, "a8ca2d0f0521f68ee38a55004782bd30dbdf0f572b14bd6cbebc4080d84fded81e2f3becae4ea443cae80d5cd2f16a96023640540c81c678d4f8180c02a7b83af5f4348bd10a313f293c26fe160404d3cb537bff6ed37e37e86db0d3adc4429f20a79ecd2e27109e27c5db3c05c497413ccb59527e48e95d3b34e8500110ad9c0f5cc45607c31d923e21820f597d9fe32ba745f3250f1bb9566b2f89b46d30e1c95840fad079f016db7826b489db35854f3caf3c7f4122e8973f4c20356fe0efb4124b1f2862ca54"}}]}, {0xdf, 0x6, "437176752a5d8e7db83a66eb7fac5a71b746b014b38b5d1b56e8287ccfbfdcd9b90232b86a95df914e60b4ba92c1c13436cfad60378910bf9d295cc450cc9b28ef753e3543b4af0eb9297fb6204d30124be0cce1981aa7c1dc747280d7e68eda322a05e0c906c2f460f23069dd5eac9494b7c5714c44fb43c668136ae533b019c88825d838b87ae2b5d10e1e0e40facda9c6f56d3083d191b3e7f780992d5ce1c8a10aa05197e1367e36821bf71a89e6949eb1cd29974ff26f487b7b4dbb996861b6ce0cd47f59922ab47684cf2ea2ee740523e3c802d3fa964362"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x10ac, 0x1, [@m_simple={0x10a8, 0xd, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x7c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x15, 0x3, '/proc/timer_list\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x13ee, 0xe88, 0x8, 0x45c, 0x9}}, @TCA_DEF_DATA={0xb, 0x3, 'bridge\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x9, 0x3, 0x9, 0x7}}, @TCA_DEF_DATA={0xb, 0x3, 'bridge\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1e, 0x1, 0x7, 0x9, 0x8000}}]}, {0x1004, 0x6, "7b28e3dc24235534c14517fb58e3f6982af92e465e6c0ad156a1cc70d6acb91e2182edf0904ef467d0cf78067b11048eb9eff6dbab1e8c92550c61b08b1dd4f2bd4eef1023ea87547d2206f68f5d95419f1605bf83cf51b28c89d3016e42f00591b74739bb6846170f56b7f9986cc79fa818d8767c93254eeef66e045bd7813e1fda4ea6273ccc16987c23cd46429ef5ab9eee404a1aa1a233269bfbc003e569ecafbe4cccd3ff62f968605a416389e9d6e92106528cf62af2c2de42796c63029b58c16b6a20ed4197917bb8b4d4bfe9a970ae1c00029a56889877d8c7220e4a93cc245fb2113e8bcfef27e0d9f4a6d786864ac588c803561a9a4123a43a75d7179c6a4742698cc684c56fbfa5c8f794d90539a3794d8019848de13febcd222bdbdea83cff87ecc0f2a4d2debcb6799ab63b2aaecc04c0753eb65e5238a517e558c0b1ea3b9e4ef66fb3b9f64543e3463f024a33d78cfef23ab1d21fbe18826e795891e87454dd70c1cc84a0ab35385e351489d8eda25fc7b13db299c13a7767f140fa0ef5b316414609805599fa884e67b72940156fb8476454168c2ffc10aaca2af8816bfe90267161c98a70c626c932ef82b9e3103591d753e1258314dd7bb2ae3ef05063762802b4e1e96a650ef567e444c94f30b75ab7c9c8629153779aba587ca73b92dc4352a02dd3783eeaaeed26418d308a5639bb48683229c9fa160876fd5e95fe31eaffd6c371d76a558c759a704ce863ccaf614dc532336f490579a111bc9dde2acca3801192d7bf3691c2bdd87f13a0d72f8d60c580d47e897488606c0b89a74f9bda89a1969657511e700eb4bac2479052a5fa22b24079e55f6f22de6f562dc0bf3751ad2b03b5b0ac67a79eef557e2633118d3d5a4d655359e023041926e20a30962a432dabc6c83057e71ba62d82466b4da7ba0c736ded469d57c84d2a9dc4366a6b4aa6eac43db0c0d0e97b50bcb11caf456338cc60cbb78179293e212a2744e78e4c7a914ab386948b24bb8475b2651f71b83dc1eca32ed0b58a6c061b4750d7db970ea42f482238a899c6c1dd34106aed9beed65ea7d65dac720e6030ed4fa21ca3aa96b3b3d0ff2a7d4fea8c2923acdd193dde3b6cf1e53606da6dd6a56441dd067906f258f37628be11be3735b2641a59d8b5e60ac95de61d8a90512ba61eb5409f757a5610fad226f4d48dfd69351bac45d00c2f69bbdb55f6244f0e151715bac87a370ebf64a9c557bdd646444d189098f825e08c8b10e39e77413f18d7e46bf911c7000a940bd2d11ee75849e6f57d7bd3c2ab21f008d257447b78b51f079eff4f56b42c48e78aa0d9298ffee73c8a08be6c32b70851b85ecf2d2c72e933e50f6d04be01cc0a5116e181f1d9829a280eb408b1a5c68e9a1a6e9ab6f86ea0c65137493b0ae6f9f5a0dbbe62aca5ed68c60bb4da124d302905c45103a67133770bb5fc27dac5e066551e96c2c4a3834126be732e657e3d1aceb361b52bd88ec784a2ec31d4d52a00550b25305d2e093f97cc7d8c124bf2cffaa49b7a875392edd2169f94f7ef9f734e15e68ae7ee86e769686f905f87f730bcf30577fd40f98d84af2598a5032b283e5af0fe7063dd47ee37c43d876075656336e7a2eac55faa68582eb6a24a6390f73e4e71cc799d6440789b3b886b00165b786d8232d3878b13d325e01b2fa4c3949fd5ce1eb042b9de7935b6244f2757e1cd99e8c65094678ebe6f199a5ea7410edcf6613e00268e3374c05d9f24d12478f9ebb18803c5c8d3d47d39088de135c79cb40604a029ac3abf258fd962af47203d9ff4cc17ef94528b48659ae337ac79c2756eb3ebd56b446c81b4a853ee1e887f46dba953effdd37072fac2f1a3f99e4465c6d59c90cb8870451b01896096067052760739c618e3c715a0c5bbe5b991d7d9abe475ee80c430be75f2a462add47e02362c0392317e1c1c3f908905471b481c2923db59366bbf1c177edc09069514ff553f4e69564de090b8b4af1f87249a6b9a07051e375f4e62f8148967ed214869f58f81b93dd9baceac355a91f5ebe976d6b84e80cd5b1f038e9cf7849be7e4adebe6336b0b341687f41acd157e14b814dd36dfe02c60b49ffba4ab4245b94f1b0f38226c1fa0fa74caf1aaf6a242605135987d80419b967f9e29115f397942156a260c3e29fc917452d7c0ec4f2149cd9edc09a2f852bfbeff6dec9b957ca7eee857e7d1e5d8482a8280b2a505ff09711f5d447cfeb2dc2217c0518bbd6739fb5d347563e203d2ac5001fb7f0072c5d3fe1bf5a18d2398a228edf6e4ea7de2db7f1d18ecfa35c057993bd20ab7cc6a40c7d9b045b8eff24b82becea4d3fa7cfe4801b1a3ddd858f1f0eda8dc5f11bb445d83498d0123cb6da303a77f192cc014f3ed99f2f04efee25ae8b3fdb50307d350e4166923a6494b2d342d8b4ee9f0607417b1db047c81b8a891c71fc3f5d8e21e4ec37a5942f9530e55903378b5fb5bfea3958a49848f6b4146073b3a8308c0e888d587ac983c36fd36f2c1521bafe3840820089314c0779bcdcdd4f4d84f11331b69c51da2324799a1fe17ce1dba3294ee717130b6c2d8585e152ea97172082de97d76045999a6caa751d71effebbbf922220d50d22f152ba4a18652591c40fffd5e229da2286185b2b042a03e11baa0160a89f4186cfe3d0b24a25eacf3518f6bf3833166b67500ec29f192371246ea1bc9ad192961ec0d7361c742176042d3e4917d2c4e1e73f27a4d3fe2d064314c964a6171c9396b325ee96010f1056bf968dc19b7200d74d5fe4a61d234053e00547647e740c288dbb73975a6970519845071e746c4989837849bcdb5d7f52e226cb81ac73ad3b108be7418571321966203c1cdea97e7877fcbadf55c83edfd506a4113616767e86b58c8e8ac3c92869bd288ed64b3174e13935268bcd8863af7668774fa3329266166b77d2c8631986973cf9dd2e555be7c03a15ae7f98d814050559d17ffce6498759ef4197e50205477a263a9e652ce3f3c04db00956e87670c3c871f2e177b39469f0063ea0bb096aab803dcb3d66c6c29a7b91e059bdca8773cd85c7a9139f5b3922ff09ca831a32f97c75ff54b79ac5ffe1e2e7c12be7749477480fefa6f75edf94eb1a8a4634c4137d7850a6b62582843d3ddf3cd85891155d74f7878a6afa708022d3d74cd18b0992f37d98b4446a95b0d6f23954e1b36f34ec09eb58985df60fbdf701b52b26bfab93e92a776b5af3d8e4418281484fcf6b21ce97a417033c963f864563ee267d465b9aab2941d99e316d19d9c069e4cad8d69e56cc0e0dbb3155e95baa489bae0e0b7f387387cf29a2f3327e12f3bfefe182261509704843fdbdeefba760916d801365335cb9a8b36f010c962d529747f3678695eee9b0c11f8b44fa6a1a2d0d15a295175b01c375e6e1d1e1c9f9e071ce9b99f8c2fcb8158512b910ec9c526ed4132f6205be0468ab12edc58a154c53ce79a8f0b761e4ee550774bbc12bcd56ce517a95f7f212630998cc362457957cb2ceff209a86e7ccaa27fd1445df17c95863d05ed7893d9989b3940835fe8e15eb25898c599b7a8709e25d0656932acb3209dde12a703d31e43cb43a268e8fccd6b8377fddad49e0f4e804a83217c6015add3295d4f3fba959b97fea3579258aebca57b338e4c560e8aadd7b721570f34f351027ea3447ca869ed53c3dd1141d5a81b8aa58ff7f00af24354bd4433fdcce8b009e9d063b2799c5ecbed0be14b2939699d3ca1246273e32ca250fda7b261e4ea90b87281ee75ced03a8a9e082a45cc8e5378d716d4b58af44fb686136da5eece0f5d08336cdc3f4ab9124e191ac40440005ab9d07e3ba32f7ffdac18f729e5ceec5d4ab32229e5e6e6d2241ef85d8c142e2499c5c12694849873f8ef315aa8e0c65e75d21536e9a81badedd42e54f200cf3fe22b26088937e272268e80a9bea8a31272f8b6c69f1a388eddb37a21341f974e8795fc21d0eb6fa6efa920d35376eeda56021871ed414dcf0d33d13865254bd00df748bcc2d90ccbbb082b87e59630bf7a37a8647ead4325d2584a5ef492078c0383a57787d909a575480bfb133bc2005a3f357f4f0a6b68424029afe8d12a4b59042c167201b50acf72b5b0e2e41b32593a07784580c9a9ee4a543fcaca5650994d3404d3638bdf1359e90afcc0158cf4cab004e9b1d67ff2851186c84f1fa6628d7248ba2f052f1c65f11cfa5876ccf444076f4b6c91542620982da14f2cdbf957c51bdd358d8875f4f05387de8ade41d0242f44b2a03811000b1b14486cf529f62a66617ab6e47314c16f87e8212a1f29b5d737668f83c6ecca67434eb41a30c0de063eead74b4bb3206038de7f1770aec696ad934eb42047754cc2457f9648d3cdbaf1be86aac18ac857756b12c464e690e3f6025c6bb49d67dde07e5cca7722a846894f13ad587f0b6bfbd3a5af8fd6a2e842cb7c718d7116767e8b399cd5f84e83ff998e8ce4a256d783122f798a1499c8ae70a40d9c282071555e17aa7eb04991261d37eb00fd7e4891cd48f99415f59df1262768f1542e91268665a584e5d4a3473d6f1ab2ef51f936d239f00a14070fa7861c1010678f2b85979417f056b8ea9ceebd8ffbd8817d1731079e5ce8cd93ec18bf2b909f39bde1db5661f51586ae249369274b7fa6f9e924a5752896d26ab11b8d05fd8dd9c6b08742dafb9e645907b6633b9cbd15b03530abfece53eac3ed24bdfc6a4410ac74660318dd31d55a1a460747a452a21e2c89a3f4695e09b6620c6c747fefdebb5844aaf5ef8aef191bd87483fa344626868390cec32de84861c2ddf160d3a0408a92212d448cf872d4b2716b1bae4469ed6d658f9fed6a3cc54d699bbfb6dbbbfdcee33c70d2d05ba2ba3c6015c7af0608861d91e22614c83f6a4309434b5c73db98594b7c3a8c7d77facc9cb1fc5042cce987bfe4b96524adb2a6b15adc9f3acb601d92f4372a79105d90ec82c618720fa1c9ee52f8cffe6b6697abd950184b476e81a1eb91eda0f778f8d28479aa357df6674b2ca61a6f60fa125cac5d056e4909cb07029bde8d9ab74aa96aefa9d31e2654361e020eb0c6990b895c35ebb6ff620ca556936ec7f87aac33f05a97978afe4545e90161190dbb7e1847b06db666997fcdeb93c56b3118f1df88405e65a3796fca1ea561277fab5c3b6fc49c8a743a9ec08fa1342733390d29a48033d91f09aa92db0b23a505236792b290fb07ae6c04ae636ca85bfa4bf82a25880d50260f93472300b6c75efe26f1fd7da59084645195b48a6d9e1753179b894fb657478047e8221e22cf48f46c590ec773cecd06855db7333d64bd3b3f8b54b1b3234dfadaa8a68d00d9e9b46a2c14a3386ed0264b489e9b8af51ba25298a95899a9198f6716b6e12fdec71ee0e927b20bd0bce29cec31014961add015c54cfd573b4182f9d51c09aa8514b6c75b11fa1a2f6bb33d458dd6edab9e83280762ddb202e80700688e23275ae0b7a53dd22a187872e0603a5b6faf85ad76e2ca98eea957db0c0ea763befe7786be1eef6d61070fede6536a6983fe69dee3e7f8f88474d1bb20396c137965214bf035776db42da740222187c3b0653dec0d6a0ce455af289152616d0c6d230b6867bf771904436595d10482d1131ad19fd382202544a32b14153214c29dd2cf60f544786e299041ea68ad8c751a91f782b96087085331603c3396254a226f02b227d7fe412f6cb0f130364b7b77e9a294261580f4c4a940f4eeb82d6fb364"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x270, 0x1, [@m_sample={0x78, 0x19, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x3, 0x5, 0x3, 0x2}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x400}]}, {0x1b, 0x6, "352635421d726d7734c402e96d432ee33b7433c7c58f00"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0xdc, 0x8, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_MARK={0x8, 0x5, 0x5}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xa736}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010101}]}, {0x70, 0x6, "b8dc517b1d77fb35e59a5d12f6885bfe037313a69b45edca5a5846c2de3fa059b5e3fbe33252ded621550f851d7707bc7b0d206c6f4dd1b7ed5a983d501c7d402cc851f0fb64ced85af224428ad9805fcd29598b3db4c1b1dcc14e1c780bc65d8d29d68cdf95851f8c7ed99e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x9308dda191e5364}}}}, @m_ct={0x118, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}]}, {0xe0, 0x6, "34bea066a9e721cfb8830bff485f124249b3a9c08758cd327005a7269c187d63f407765a938b379f1fea3b1b1810f73ee68c9d264943d26c1bbe3afdd6aca485f63167c72bec332eadee66b5fee7d20e226b01cab41665c507496d6702dd1c23db3c57a0c66844d75a45098babb27061ef6a5f75dc477ba415d019956b9660fbcdf51d8bb982f57465eb7b25e5ad0a09511f068d0501b554c2823365afb49384cdc67b979b8d2b0949ecf39092b14fa7fab2de256765b565bdd1a32bd1331ef846a729d19a08601a8d6cf3b320eae06105270bc5a176fd8b4788789d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x7}}}}]}, {0x44c, 0x1, [@m_ct={0xcc, 0x20, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, [], 0x3c}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_ACTION={0x6, 0x3, 0x20}]}, {0x80, 0x6, "79b4091b64b991e9deefc93a77a4e30570d017ca38b38373ddecfd537baebf3f0a22411956dbe46cb2941b01e9307da8017fd92b14c1fe26b72c1b1a99113cce91b4208f4ae90c622527db762dad69d92c8680ac0ee5f8796c86c3d76df7dffa8f34585c06d96e8721c6862dae0fb371ad516faa97ca60d0c640d3af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x13c, 0x14, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffa}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8111}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1e}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0xde, 0x6, "359ccf640866fae88db7e76d5ff44e21117fc0312294ed389fae32caf3bac704d2d449fb8351e1484a9d90f53f12b5a40ea876f688fdf1dc8e7d5aac4b88d9192d5bffbbb5d687ae089f1c648acd009b6bc47fc78c0690561ac17fe3cd338a1b92b1efcc3a04d52c54de88f2071be71055a6f793f73567aa3f86d00b77dd76ad23669fb570c5d4addde161427bc808a3239d868b8d771c76b64fca744be7ee6a27380a182ef57f8d74f77c1118b43d552983b40104e17d56af4c32684600e02cbaf38aecadedef67359ca15c8fde3fb4821b0013b0867a28454e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0x188, 0x1c, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}, @TCA_CT_LABELS_MASK={0x14, 0x8, "91df989137bbd9adae983f4528553c35"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, [], 0x2b}}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "17a7e4d67237e8359cb09cde467fd197"}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffb, 0x0, 0xffffffffdffffff0, 0x8, 0x400}}]}, {0xee, 0x6, "8a1063f2311f8513b700227a9856ac7456b7b98774bef5c4783629f5890ce61522535324b23f324e1e28180c5b02c0a07b505f2a2fb14a578336ccde772cf8599841b6615aa4cde9f76af5fe62684cc6d548a12ec1bf39ecd696bd48338efdf58c859c09f37f09f4cccf33a83474d669e600c3512fb023dceb93d52b404c64ecaec1133086c81d046b3c3885c1eb6203073b999da26f2778a3a82e9283dc58d46dba5ba9f96575f4199a6e8ef87f78749c475b6ff00a04495a135f5283a9db49341df3a35dabf246324b7975f410821a73429cf19c97992a952dec308c7fd4a95e435a81ff5aa3221a74"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xb8, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8000, 0x800, 0xffffffffffffffff, 0x0, 0x3}}]}, {0x74, 0x6, "c66a0c70645cd42fa5dd35f03ca00b093022f9252e969dcbfe730c7dec49e04b5c71c900ed9a01c832ad07d3291efc1c2b21791edf39aec11e762f53a10c98c763009fe41e084e49231d986cc64145f32ea9a29d9ec638d8e9a82695fe76f10217272d1a49dd124a4e17242aa67a910b"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x355c}, 0x1, 0x0, 0x0, 0x4800}, 0x4010) sysfs$2(0x2, 0x3, &(0x7f00000000c0)=""/56) 23:41:25 executing program 2: socket(0x6, 0x2, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) r2 = socket(0x9, 0x2, 0x1000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r4, r3, 0x0) [ 379.620439][T10497] validate_nla: 38 callbacks suppressed [ 379.620467][T10497] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 379.634781][T10497] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 379.643116][T10497] __nla_validate_parse: 14 callbacks suppressed [ 379.643141][T10497] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:25 executing program 0: mq_open(&(0x7f0000000000)='\x00', 0x80, 0x0, &(0x7f0000000040)={0x6, 0x8, 0x200, 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010062726964226500001c0000000c001f000000000000000000ebb0107156c84862a4e8d8128f144a72e0d514005cb6a5eff27904000000000000000000"], 0x4c}}, 0x0) 23:41:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r5, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 380.007128][T10506] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 380.015454][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 380.025239][T10506] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 380.053829][T10507] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 380.062345][T10507] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 380.070696][T10507] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 380.196421][T10509] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 380.204671][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 380.214312][T10509] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:26 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r4, r3, 0x0) keyctl$chown(0x9, r1, r3, 0x0) 23:41:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:26 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/68) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) [ 380.508270][T10516] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 380.517285][T10516] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 380.525514][T10516] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:26 executing program 2: socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800030b00000000000012080000000000000000000000000800170000000000"], 0x24}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000000)=""/109) 23:41:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 380.833991][T10526] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 380.843239][T10526] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 380.851663][T10526] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 380.914233][T10527] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 380.956827][T10526] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = socket(0x10, 0x3, 0xfffffffc) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r6, r5, 0x0) 23:41:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r2}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r2}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x302, 0x80040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}]}, 0x44}}, 0x0) 23:41:27 executing program 2: chdir(&(0x7f0000000080)='./file0\x00') r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x800000000002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r3, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, &(0x7f0000000000)) keyctl$chown(0x9, r2, r1, 0x0) 23:41:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x25}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:28 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000000)='\x00', 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000000)='\x00', 0x0) keyctl$chown(0x9, r3, r1, 0x0) 23:41:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, 0x0, 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:28 executing program 2: socket(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0x4e) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000100)=0x8) socket$kcm(0x10, 0x2, 0x0) dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r2) 23:41:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, 0x0, 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:28 executing program 3: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r5, r4, 0x0) r6 = gettid() r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r8, 0x2, 0x70bd21, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xa8, r8, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x94, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdf67f44}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9e2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6afa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73dc34bf}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53faa893}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6952b348}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1b5}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30b7e041}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5db91f61}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fb3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7eae5dce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fa95a91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f3087ca}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a5", 0xb1}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8}], 0x1, 0x0) write$P9_RGETATTR(r2, &(0x7f0000000040)={0xa0, 0x19, 0x2, {0x20, {0x80, 0x1, 0x8}, 0x4b, r4, r9, 0x0, 0x8, 0x7, 0x1, 0x401, 0x233, 0x400, 0x80, 0x2, 0x3, 0x7fffffff, 0x25, 0x9d1, 0x7, 0xffffffffffffff81}}, 0xa0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:41:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, 0x0, 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x400000) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='\x00', &(0x7f00000000c0)="1a57ceb28ecc47aab06378cc5163c28d5508331e5d6e4450b668cfd2fcc8ae224e53111aef995f4cfa865ccc0ea3c7cc959f484328f09d27e61e5044522f6df3f8f20af4da330d582c96c6362aafe02baa01495a19225ecde7d1235f536cc8e03dd30d47a141d4c217f4a50fdbeb34d4a127ca", 0x73) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:41:29 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/214, 0xd6}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/152, 0x98}], 0x4, &(0x7f0000000400)=""/99, 0x63}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000004c0)=0x1, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000500)='/dev/input/mouse#\x00', 0x8, 0x48002) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000540)=""/179, &(0x7f0000000600)=0xb3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0xd00, 0xaf, 0x4, 0x81}, {0x930, 0xff, 0x7}]}, 0x10) r3 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000006c0)={0x0, 0x1}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000740)={r4, 0xe8, "15746677ab14fa0ea867d93ee4ca8109aaa49630ab12ab31e2df39b6640a9dd0258e5d929163e6f2b7135eee8cbd9c264caa6491e56b8cfae0eaa3e66b674bd41074069eb3c3b7de7f9e7b0a10e070868539827f7724d0748e9652eaf10f5bcb18fc1e1d722b3f192f1498c69a49e6240eeac5fd497b0a42c888b30d18cad3096372ae16eaa77399d53c17008c572f3c4d0026eb3c7885cf27d327f039e08fbed1cf7bb879fd0a70c9726a2eab8b69dff670f22349c732be6d7e576d87ca3d6d8ff9ff184811e1272b14c167ecefbde250d9146703f29b5c597e0ed01ddf0846d85def2cf3533458"}, &(0x7f0000000840)=0xf0) connect$rds(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f00000008c0)={0x6, 'veth1_macvtap\x00', {0x48}, 0x2}) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000940)={0x3f, 0x5}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980)='/dev/nvram\x00', 0x60000, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r7, 0x4161, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000ac0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) write$P9_RSTATu(r3, &(0x7f0000000bc0)={0x6c, 0x7d, 0x2, {{0x0, 0x57, 0xff, 0x0, {0x40, 0x3, 0x7}, 0x100000, 0x39600000, 0xbd, 0x100, 0xe, 'veth1_macvtap\x00', 0x12, '/dev/input/mouse#\x00', 0x0, '', 0x4, '%[,-'}, 0x0, '', r8, 0xee01, r9}}, 0x6c) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000c80)) 23:41:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800030b00000000000000000b000000000000000084f1001800170000000000d2f97dd02504c1105652a1a450fd297b1dfffbc9fd04d2420dcd941160b496dc747c7b7cd772edec8cb9040038ec1ef4d8c13a6d7afc427d8ed84a3a31a85d0000000000001699"], 0x24}}, 0x0) 23:41:29 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r5}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r5, 0x4, 0x8, 0x7f, 0x6, 0x20, @empty, @private2, 0x80, 0x8000, 0x171, 0x4}}) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x5, r6, 0xe}, 0x10) 23:41:29 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x803, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000940)) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000100)) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r1, 0x0) 23:41:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 384.288226][T10600] IPVS: ftp: loaded support on port[0] = 21 23:41:30 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x140b, 0x2, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) keyctl$chown(0x9, r2, r1, 0x0) 23:41:30 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x503, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3f}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x21}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2e6, 0x603}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20004090) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) r2 = socket$kcm(0x10, 0x800000000002, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r5, r4, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{0xa0000000, 0x3}, {0x1ff, 0x3}], r4}, 0x2d, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r2, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/55, 0x37) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) 23:41:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000040)={0x99e, 0x0, 0x1000, 0x5, 0x6, 0x101}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x4c001) [ 384.671936][T10629] validate_nla: 28 callbacks suppressed [ 384.671964][T10629] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 384.686316][T10629] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 384.694540][T10629] __nla_validate_parse: 12 callbacks suppressed [ 384.694569][T10629] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 385.341538][T10600] chnl_net:caif_netlink_parms(): no params data found [ 385.639270][T10600] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.647909][T10600] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.657495][T10600] device bridge_slave_0 entered promiscuous mode [ 385.746365][T10600] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.753644][T10600] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.763368][T10600] device bridge_slave_1 entered promiscuous mode [ 385.887543][T10600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.953718][T10600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.015531][T10600] team0: Port device team_slave_0 added [ 386.027504][T10600] team0: Port device team_slave_1 added [ 386.103482][T10600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.112118][T10600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.138253][T10600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.165271][T10600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.172337][T10600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.198452][T10600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.333625][T10600] device hsr_slave_0 entered promiscuous mode [ 386.392710][T10600] device hsr_slave_1 entered promiscuous mode [ 386.488206][T10600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.496034][T10600] Cannot create hsr debugfs directory [ 386.940006][T10600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.993361][T10600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 387.073135][T10600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 387.140052][T10600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 387.424236][T10600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.479059][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.488438][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.513260][T10600] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.542770][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.552976][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.563796][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.571146][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.592041][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.622972][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.633280][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.643244][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.650587][ T8667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.740152][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.751862][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 387.763024][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 387.774071][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.784721][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 387.795669][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.806181][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 387.816025][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 387.825935][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 387.835856][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 387.851280][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 387.865392][T10600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 387.967440][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 387.975422][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 388.008793][T10600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.077940][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 388.088370][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.162309][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 388.172679][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 388.205196][T10600] device veth0_vlan entered promiscuous mode [ 388.231118][T10600] device veth1_vlan entered promiscuous mode [ 388.241158][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 388.252069][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 388.261296][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 388.321841][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 388.333789][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 388.343947][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 388.365627][T10600] device veth0_macvtap entered promiscuous mode [ 388.383730][T10600] device veth1_macvtap entered promiscuous mode [ 388.435773][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 388.447319][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.457371][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 388.467934][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.477924][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 388.489534][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.499606][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 388.510243][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.524819][T10600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.537354][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 388.547107][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 388.556675][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 388.567371][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 388.617923][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 388.628630][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.638986][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 388.650449][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.660463][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 388.671033][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.681037][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 388.691604][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.705727][T10600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.715790][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 388.726108][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:41:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0)='mptcp_pm\x00') io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x44040) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x48810) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10280}}, 0x20}}, 0x0) 23:41:35 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800030b00000000000000000a00000000000000000000000800218517000000"], 0x24}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x15, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000001500)=""/218, 0xda}], 0x9, &(0x7f00000016c0)=""/4096, 0x1000}, 0x10103) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f0000002840)) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000002880)={{0x0, 0x0, 0x80}}) r7 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x48, 0x1401, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000004}, 0xc804) 23:41:35 executing program 4: socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000002c0)={0x7, 'veth1_to_bridge\x00', {0xc17d}, 0xa7e5}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$inet6(0xa, 0x80003, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x220, 0x4c, 0x274, 0x0, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7], 0x0, 0x1d8, 0x220, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) ptrace$setopts(0x4206, r2, 0x0, 0x0) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={0x0, r5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r5, 0x2}}, 0x18) tkill(r2, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 23:41:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f00000002c0)={0x7, {{0xa, 0x4e20, 0x8001, @mcast1, 0x80000001}}}, 0x88) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f00000000c0)={0x990000, 0xeb, 0x0, r0, 0x0, &(0x7f0000000080)={0x9a0907, 0x7ff, [], @p_u16=&(0x7f0000000040)=0xffff}}) r8 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) 23:41:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 389.354682][T10834] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 389.363017][T10834] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 389.372334][T10834] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x4, 0x0, 0x5d, 0x100}, {0x80, 0x6, 0x0, 0x5}, {0x9, 0x0, 0x3, 0x5}, {0x4, 0x7, 0x3, 0x4}, {0x0, 0xb8, 0x3, 0x5}, {0x5, 0x80, 0x0, 0xffffffff}]}, 0x10) [ 389.752137][T10845] xt_CT: No such helper "syz1" 23:41:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x8}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x48}}, 0x0) 23:41:35 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)='keyring\x00', 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0xe, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) r3 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a5", 0xb1}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8}], 0x1, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) keyctl$chown(0x9, r2, r5, 0xee00) 23:41:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x400, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:41:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2041, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r3}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r3}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@empty, r3}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x15) [ 390.278265][T10871] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 390.286847][T10871] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 390.295383][T10871] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800200000001f4457965da92e411f00000000450b3ef000000062a8bdb29345"], 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000040)) [ 390.741897][T10880] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 390.750610][T10880] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 390.759070][T10880] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:36 executing program 2: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) r4 = dup3(r0, r3, 0x80000) socket(0xa, 0xa, 0x8001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000100)={0x0, 0x19d, 0x73, {0xfffffff7, 0x1000}, 0x7}) r5 = socket(0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x4600, 0x8, 0x7}, 0x18) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={0x0, r8}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r8, 0x1}}, 0xfffffffffffffdd1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000000)=0x2, 0x4) keyctl$chown(0x9, r10, r9, 0x0) 23:41:38 executing program 4: socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000002c0)={0x7, 'veth1_to_bridge\x00', {0xc17d}, 0xa7e5}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$inet6(0xa, 0x80003, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x220, 0x4c, 0x274, 0x0, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7], 0x0, 0x1d8, 0x220, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) ptrace$setopts(0x4206, r2, 0x0, 0x0) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={0x0, r5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r5, 0x2}}, 0x18) tkill(r2, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 23:41:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x64, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008091}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x804) 23:41:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000040)) socket$phonet_pipe(0x23, 0x5, 0x2) 23:41:38 executing program 2: r0 = socket(0xb, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) r3 = socket$kcm(0x10, 0x800000000002, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r6, 0x9}, 0x8) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r3, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VT_WAITACTIVE(r8, 0x5607) [ 392.488934][T10901] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 392.497729][T10901] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 392.506211][T10901] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 392.539873][T10907] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 392.548412][T10907] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 392.556860][T10907] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x4, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x17, 0x3}]}, 0x24}}, 0x0) [ 392.693846][T10907] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 392.703229][T10907] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 392.711602][T10907] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:38 executing program 2: socket(0x10, 0x2, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9c, 0x400900) r1 = open(&(0x7f0000000080)='./file0\x00', 0x14b800, 0x10) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000580)={0x2, 0x1, 0xe, 0x11, 0xfa, &(0x7f0000000180)="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"}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xfffd, 0x1000}, &(0x7f0000000100)=0x8) fdatasync(r0) r5 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x9, 0x0, r7, 0x0) [ 393.028009][T10914] xt_CT: No such helper "syz1" [ 393.100627][T10925] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:39 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @IFLA_VTI_LOCAL={0x8, 0x4, @remote}, @IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x50}}, 0x0) 23:41:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) r6 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a5", 0xb1}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8}], 0x1, 0x0) r8 = getuid() r9 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) statx(r11, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)={{0x2, r5, r7, r8, r12, 0x1, 0x71d}, 0x3, 0xc114, 0x0, 0x0, 0x0, 0x0, 0x9ea3}) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000040)={0xfffffffffffffffc, 0xffff}) 23:41:39 executing program 2: r0 = socket(0x28, 0xe7e4a9e95550cb90, 0xfffffffb) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 393.542382][T10940] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:41 executing program 4: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x1ff) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1adbd78e6795af9e}]) 23:41:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000040)={0x401, "7522285eb762bd4eece99e1c6e7b613163d94871940fdc8fa901bba46495d46d", 0x3, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800030b00000000000000000a00000000000000000000000800170000005f00"], 0x24}}, 0x0) 23:41:41 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000000)=r8, 0x4) 23:41:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$inet(0x10, 0x3, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) r6 = dup3(r4, r5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r9 = openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x100, 0x0) ioctl$BLKIOOPT(r9, 0x1279, &(0x7f0000000380)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r10}, 0x3c) ioctl$SIOCPNADDRESOURCE(r6, 0x89e0, &(0x7f00000003c0)=0xffffffff) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r10}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r7, 0x400, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x810) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000010000104000000000000000000000000232b2ef7be5c0d2a5a6d61078e0d680e131e9ae4073e84de56da5ba5a619743f9a3923ff9dc2a62a864f39b5ca0c39c17703704381cc2393d7a6b26dc2a140f0e0a43ed280f198c11bf68516bc2ab0e99d5c68a1cce38188", @ANYRES32=0x0, @ANYBLOB="0000000000000000000012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000"], 0x4c}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="395bccf7057dd9fdbd02c9f793383c24342c392eaf81831e132ab0bc3a4c7ffccbd35abcf07df9c670152caf7c02f1f1a512f936bdffcd212dd8bacdaefde614f53d33491298e0038c933d17d6ecb256de185a539662835ab09cb3ace43397af05c1b289eb82f721d6940a629edbe8b33ea8eaa4bdd939e7eb011c3430bd858c38f6a7ff58c2be952e933d721c", @ANYRES16, @ANYBLOB="02002abd7000fddbdf2507000000080008007f00000106000b001e00000006000b0001000000"], 0x2c}}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x38, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 23:41:41 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10401, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x0, 0x5, {{0xa, 0x4, 0x1, 0x30, 0x28, 0x67, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@cipso={0x86, 0x14, 0x0, [{0x7, 0xe, "37ff6c5a263d346339cc18eb"}]}]}}}}}) recvfrom$packet(r0, &(0x7f0000000040)=""/188, 0xbc, 0x20141, &(0x7f00000001c0)={0x11, 0xf7, r1, 0x1, 0x40, 0x6, @broadcast}, 0x14) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x9d0000, 0x35d0, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x990a66, 0x1f, [], @p_u32=&(0x7f0000000200)=0x5}}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[r3, r0, r0], 0x3) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x82001, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000400)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000440)={r5, 0x7ff, 0x6, 0x5}, 0x14) r6 = syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x7, 0x341080) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x440, 0x0) ppoll(&(0x7f0000000500)=[{r6}, {r7, 0x110}], 0x2, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x3]}, 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r8, 0xd34, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x675}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004090}, 0x40080) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000780)={0x0, r9}) r10 = syz_open_procfs(0x0, &(0x7f00000007c0)='oom_score\x00') sendmsg$TIPC_NL_NODE_GET(r10, &(0x7f0000000b40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000840)={0x284, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x56e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xefb}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x140, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf89}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1f, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x28}}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x25c, @dev={0xfe, 0x80, [], 0x2b}, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1738}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7bba}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x8800}, 0x44000) [ 395.777820][T10954] validate_nla: 4 callbacks suppressed [ 395.777849][T10954] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 395.791918][T10954] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 395.800228][T10954] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 395.851173][T10958] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800030b00000000000000000a00000000000000000000000800170000000000b1cdcf7e059926defcf7ef2898e6f9b7979ced06e79a36b6c98cf812b07458973fc4551168d471c213e26a62c11463e66a571bac7f2f99ee38772b9e27108420cc47bd958bb8a31dba3e8616bdf0927fb77b591f38d9b09d492a551c6c54ef40b211c9b1e66f360f45123e17fdffc1159d18e8ce183535f8c86073641cc8633f01a8e18a133d02f606ce1a91993d1ab88ff514021bfa447dd6ba2117c96b04fd8e5087161c00000000000000000000000000000000000000005bc9309396481548a12aafc56bed"], 0x24}}, 0x0) 23:41:42 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x5, 0x3}, 0x8) keyctl$chown(0x9, r2, r1, 0x0) 23:41:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) 23:41:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:42 executing program 3: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x1, 0xea, 0x4}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) [ 396.471811][T10977] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 396.480213][T10977] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 396.489783][T10977] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:42 executing program 2: socket(0x10, 0x2, 0xfffffffd) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xfffffffffffffdad) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:42 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x48}, @generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 23:41:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80000001, 0x40) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000040)) 23:41:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8082, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0xfffffffd, @local, 0x81}}}, &(0x7f0000000140)=0x84) 23:41:42 executing program 2: r0 = socket(0x23, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x900, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000100)={0x3c, 0xc8, 0x1000, 0xfd, 0xfff7}) keyctl$chown(0x9, r2, r1, 0x0) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f0000000000)={0xf34, 0x1f, 0x80000000000, 0x8, 0x1, 0x64ed}) [ 396.958249][T10986] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 396.966619][T10986] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 396.975035][T10986] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 397.080574][T10989] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 397.089383][T10989] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 397.097800][T10989] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 397.564350][T11000] IPVS: ftp: loaded support on port[0] = 21 [ 397.944161][T11000] chnl_net:caif_netlink_parms(): no params data found [ 398.240808][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.248947][T11000] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.258660][T11000] device bridge_slave_0 entered promiscuous mode [ 398.270666][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.278095][T11000] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.287716][T11000] device bridge_slave_1 entered promiscuous mode [ 398.358798][T11000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.376283][T11000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.437953][T11000] team0: Port device team_slave_0 added [ 398.453203][T11000] team0: Port device team_slave_1 added [ 398.503059][T11000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.510232][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.536519][T11000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.589648][T11000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.596852][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.623208][T11000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.765215][T11000] device hsr_slave_0 entered promiscuous mode [ 398.814885][T11000] device hsr_slave_1 entered promiscuous mode [ 398.873978][T11000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.881612][T11000] Cannot create hsr debugfs directory [ 399.102002][T11000] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 399.162657][T11000] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 399.210527][T11000] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 399.269719][T11000] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.437346][T11000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.462834][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 399.472250][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 399.490598][T11000] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.523544][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 399.532914][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 399.543931][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.551140][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.560239][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 399.570385][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.580833][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.588163][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.597267][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 399.640639][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.649805][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 399.660763][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 399.672089][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 399.682467][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 399.693138][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 399.715807][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 399.725749][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 399.735691][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.756518][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.768281][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.793498][T11000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 399.851505][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 399.859630][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 399.887682][T11000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.927181][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 399.937574][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 399.991356][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 400.000644][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 400.020910][T11000] device veth0_vlan entered promiscuous mode [ 400.037270][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 400.046879][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 400.068832][T11000] device veth1_vlan entered promiscuous mode [ 400.120146][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 400.130032][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 400.139960][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 400.150286][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.168550][T11000] device veth0_macvtap entered promiscuous mode [ 400.191155][T11000] device veth1_macvtap entered promiscuous mode [ 400.235753][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 400.248711][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.258788][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 400.269415][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.279489][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 400.290114][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.300172][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 400.311591][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.321669][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 400.332285][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.346658][T11000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.355579][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 400.365306][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.374970][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 400.385205][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.418513][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 400.430752][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.440801][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 400.451427][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.461492][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 400.472224][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.482270][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 400.492891][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.502988][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 400.513629][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.527806][T11000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.536236][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 400.546516][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:41:46 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 23:41:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000000030b00000000000000000a00000000000800000000000800172000000000"], 0x24}}, 0x0) 23:41:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)={0x3bc, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x1e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '../\xf8(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}^$]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0x19, 0x5, "ffddc2cdc18afc4c4feedacf485cd23d0ba414c2c5"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^\\]\x92\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')-+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '\x1f{.(*,\x9b/!%^\\)(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\':&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '){\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$&/-$\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x55}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4000}, 0x24000144) 23:41:46 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x48}, @generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 23:41:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:46 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x29, @loopback, 0x4e24, 0x4, 'ovf\x00', 0x32, 0x70, 0x62}, {@multicast1, 0x4e20, 0x10000, 0x8001, 0x6f, 0x3}}, 0x44) keyctl$chown(0x9, r2, r1, 0x0) 23:41:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "6935161e2f1b255c02c2494f4adb671491fe7b62942a8cc15fbdd318c0c93e8c"}) [ 400.970911][T11223] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 400.980675][T11223] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 400.989095][T11223] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 401.004680][T11220] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 401.012912][T11220] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 401.021286][T11220] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000040)=0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:41:47 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r1, r2) [ 401.221623][T11223] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 401.230090][T11223] netlink: 'syz-executor.0': attribute type 31 has an invalid length. [ 401.238481][T11223] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:47 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x48}, @generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 23:41:47 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "6935161e2f1b255c02c2494f4adb671491fe7b62942a8cc15fbdd318c0c93e8c"}) [ 401.571430][T11240] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 401.580140][T11240] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 401.588505][T11240] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x8000000000000003}]}}}]}, 0xfffffffffffffde3}, 0x1, 0x0, 0x0, 0x40064}, 0x0) 23:41:47 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000000)=0xc) socket$netlink(0x10, 0x3, 0xf) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x0, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:47 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "6935161e2f1b255c02c2494f4adb671491fe7b62942a8cc15fbdd318c0c93e8c"}) 23:41:47 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x48}, @generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 23:41:48 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000100001060400000000000000000000006d4edacd09d2d7f7a94a45272733090a36bf5f998bcbffbac5242d8a277939d49fd169b70564737a0467ec5dfd6ee215d1d8fdf44ed7c47c4a48ed970a2f9e4e73a1760ff22ad885b72b70420c5ca1bb54177eb47aafed0bc64db87598a53f43a428a7fc4dc3b9af2ec065dc3ebb872f1ff612fb0effae93fe9c2d41eb9cc327075e5d81103c7457f73dd7dbdc873d9ad0e26c1d1a8a628863566cab23d313a0786f367865eddbefe3543c93cbe56d78ce0771237615a15f9092e8db99", @ANYRES32=0x0, @ANYBLOB="0002000000000000130012800b00010062726964676500ff1c0002800c001f0000bfcf36a40000000c001f000000000000000000"], 0x4c}}, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000000c0)=""/174) [ 402.114183][T11253] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 402.122604][T11253] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 402.131129][T11253] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "6935161e2f1b255c02c2494f4adb671491fe7b62942a8cc15fbdd318c0c93e8c"}) 23:41:48 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='|&E\x00', @ANYRES16=r4, @ANYBLOB="000329bd7000ffdbdf25030000000c000300040000000000000008000100000000000c00080002000000000000000c00020006000000000000000c00078008000100", @ANYRES32=r0, @ANYBLOB="0c00080004000000000000000c00040080000000000000000c000400b9000000000000000c00050000fcff0000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r7}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r9}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r9}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', r9}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001700)={&(0x7f0000000700)={0x230, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x7, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7c, 0x4, "d7bada4c2fd97dc0693f4dda0b7078cef8ef5ce9ff701d354bcd4a703616d26cb7e9b2d5fdf9b81533401f159648a34b71d7b1830fb7f99a0e427c91526758a1923685f8fb7180eec7fd7dda3375c4a33b48c53ff947e03b6618b4574a8ce1d976855522a552c8c71646ca3172722a1b6a128804db3ca0a3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x42, 0x5, "016dfc5cc466fcb89d04f2b1e7cc4a4fd74c1352a945d05f3a7ea7e2cc75223747b3e3a4852074f0243431e8a3c6f4a5a5ab67635eb6f55d827746a60a3f"}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "bec12ef270e49d30a93909f545f9065c95aa2b99ba486cbebed28422318419fa59a57b9d87ed6e5ef901e6298d2c1f74c254d00155a6b5f33841a7fb4281924aca21691293602b70aa75190582ed94e6f0a569a7abbe1ce203988675a8cb9aceeca5e3f1926b1a4aeab32bf4340e18ba3d4250b0744c62da71ee92ab14f084f73d7273c5775ea33b9bc9992b8c453f3ca5f85d3b36a7ceb1b0c53b1e1ef7ee2cb0c6c45865851bc0ee365056"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x20040000}, 0x8004) r11 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r11, r5, 0x0) 23:41:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x0, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:48 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000000140)=""/91, 0x5b) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00', 0x7b, 0x31c07}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x4a20, 0x0) 23:41:48 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100}, 0x6) r0 = socket(0x11, 0x3, 0x6) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) recvfrom(r0, &(0x7f00000000c0)=""/40, 0x28, 0x40000000, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="31ba396e3fad4800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800c00220000100000000000000500240001000000"], 0x48}}, 0x0) [ 402.675399][T11268] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) 23:41:48 executing program 2: r0 = socket(0x25, 0x2, 0x4000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x140) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x4) keyctl$chown(0x9, r2, r1, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000001c0)) 23:41:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x0, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:49 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000000140)=""/91, 0x5b) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00', 0x7b, 0x31c07}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x4a20, 0x0) 23:41:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 403.209395][T11282] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:49 executing program 5: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyprintk\x00', 0x88b82, 0x0) 23:41:49 executing program 2: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000100)={0xffff, 0x1, "e267fde473672a62c4982a33fe3a0c326683e61d2822c9f99229873dd97ecb0e", 0x0, 0x8, 0x3, 0xffffffff}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={0x0, r7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {r7, 0x800}}, 0x10) keyctl$chown(0x9, r5, r4, 0x0) [ 403.373924][T11287] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x0, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 403.420239][T11287] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:49 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000000140)=""/91, 0x5b) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00', 0x7b, 0x31c07}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x4a20, 0x0) 23:41:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) recvfrom$l2tp(r0, &(0x7f0000000280)=""/97, 0x61, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4e20, @local}, 0x88, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000000)='wg1\x00', 0x3, 0x99, 0x4}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000200130012800b00010062726964676500001c0002800c001f0000000000000000000c001f000000000400000000"], 0x4c}}, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x402200, 0x0) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000140)) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGBITKEY(r6, 0x80404521, &(0x7f0000000180)=""/240) [ 404.056270][T11295] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x34, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1000011}]}]}]}, 0x34}}, 0x0) [ 404.243825][T11303] ucma_write: process 280 (syz-executor.2) changed security contexts after opening file descriptor, this is not allowed. 23:41:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x0, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00c5d2911808d22100d505f563c88d7eaae1b8a39484a4c59778ca1df0cbde17382c9890f5f08378ffa83dd1cfce66453ca34a670c005e90a88e3bf3935446878749e758e5a7b13170706af64aacfbcf91a2178226a199", @ANYRES32=0x0, @ANYBLOB="00000000ff010000130012804b00010062726964676500001c0002800c001f0000000000000000000c001f000000000000000000"], 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_USER(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xa8, 0x3ed, 0x0, 0x70bd29, 0x25dfdbfe, "77dfc18801fdef79a54da42369dfd541653a2e58710f58879f81d9de717996948c7d5d4af05d9aa1e0d53bc2846ba0cccad2ff7c0e3705f23d22bab1167428dc2d1deae3061f3fffe62fe8d9b4954e0b2be14bb618c0c0b9d9c6a7809eec171037f05695c4587b3b949067676fe80df5c77f70e2cc8e6ab05728601ff7ae16d351091b4833d707770a6ee118b8a16742dc0af36c5c", ["", "", "", "", "", "", ""]}, 0xa8}, 0x1, 0x0, 0x0, 0x44805}, 0x40000) 23:41:50 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000000140)=""/91, 0x5b) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00', 0x7b, 0x31c07}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x4a20, 0x0) 23:41:50 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) migrate_pages(0x0, 0x80, &(0x7f0000000000)=0x80000000, &(0x7f0000000080)=0x9) keyctl$chown(0x9, r2, r1, 0x0) 23:41:50 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000000c0)={0x653d, 0x0, "f37d4580a8483f9f0a30c6ed737e5ff35adee44fb2413d7f"}) 23:41:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x0, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe02}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffbdc8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x5}, 0xc0) 23:41:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x0, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x1041}, 0x15) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x10041}, 0x10) dup2(r0, r1) 23:41:51 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 23:41:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x1, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x81}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 405.491357][T11341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 23:41:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x1041}, 0x15) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x10041}, 0x10) dup2(r0, r1) 23:41:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x0, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:51 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 23:41:51 executing program 2: socket(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r8) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000000)=0xc) r10 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r10, r9, 0x0) 23:41:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x60, 0x0, &(0x7f00000002c0)=0x44) 23:41:51 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 23:41:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x1041}, 0x15) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x10041}, 0x10) dup2(r0, r1) 23:41:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x0, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:52 executing program 2: r0 = socket(0xb, 0x2, 0xfffffffc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000000)={0x6943, 0xff}) keyctl$chown(0x9, r2, r1, 0x0) [ 406.279071][T11366] validate_nla: 26 callbacks suppressed [ 406.279100][T11366] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 406.293610][T11366] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 406.301814][T11366] __nla_validate_parse: 8 callbacks suppressed [ 406.301842][T11366] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x60, 0x0, &(0x7f00000002c0)=0x44) 23:41:52 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 23:41:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x1041}, 0x15) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x10041}, 0x10) dup2(r0, r1) 23:41:52 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:41:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x60, 0x0, &(0x7f00000002c0)=0x44) 23:41:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x0, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:52 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f0000002a00)={0x0, 0x0, 0x0}, 0x0) [ 406.991762][T11383] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 407.000242][T11383] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 407.008658][T11383] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x60, 0x0, &(0x7f00000002c0)=0x44) 23:41:53 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000019000755a84a5bd02310a00002000000", 0x14}], 0x1}, 0x0) 23:41:53 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f0000002a00)={0x0, 0x0, 0x0}, 0x0) 23:41:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x0, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:53 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001180)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x7, 0x0, 0x0, 0x6}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001100)={r5, 0x7f}, &(0x7f0000001140)=0x8) r6 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$NBD_SET_BLKSIZE(r8, 0xab01, 0xfffffffffffffc01) r9 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf={0x1000, &(0x7f0000000100)="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"}) ioctl$sock_SIOCGSKNS(r9, 0x894c, &(0x7f0000000000)=0x9) 23:41:53 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x160, 0x9403, 0x52020000, 0x160, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'sit0\x00', 'lo\x00', {}, {}, 0x6c}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:41:53 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000019000755a84a5bd02310a00002000000", 0x14}], 0x1}, 0x0) [ 407.531559][T11397] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 407.539981][T11397] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 407.548410][T11397] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:53 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f0000002a00)={0x0, 0x0, 0x0}, 0x0) 23:41:53 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x160, 0x9403, 0x52020000, 0x160, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'sit0\x00', 'lo\x00', {}, {}, 0x6c}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 407.787458][T11401] xt_CT: No such helper "pptp" 23:41:53 executing program 2: socket(0x2c, 0x3, 0xff) r0 = socket$kcm(0x10, 0x5, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0xf3e, 0xb, 0x1, @multicast, 'batadv_slave_1\x00'}) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0x6) r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$NFT_MSG_GETGEN(r10, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x20014004) setsockopt(r10, 0x3ff, 0x4, &(0x7f0000000180)="635229c11c06e844210b0554966ce9ade24ffd0bffc09c4354781401986a4fcbb23bb7c76d98e061cce6834e6af8127c0f57478de39c646a23bec4853bee3570b95578937f3fcf8ab8f2b5f9a204d7b7c78ee16e87993d2b5125271afb24892b5c30f83018de6b282352d67321dc6efd6cbefafa5e08dac624455b1f5e3fe52fa979cd1a946768bab49ec57ee4e87232930ab0106b0e3e", 0x97) keyctl$chown(0x9, r7, r6, 0x0) 23:41:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x0, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:53 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000019000755a84a5bd02310a00002000000", 0x14}], 0x1}, 0x0) [ 408.019915][T11413] xt_CT: No such helper "pptp" 23:41:54 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x160, 0x9403, 0x52020000, 0x160, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'sit0\x00', 'lo\x00', {}, {}, 0x6c}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:41:54 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f0000002a00)={0x0, 0x0, 0x0}, 0x0) [ 408.259462][T11420] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 408.267852][T11420] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 408.276262][T11420] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 408.350854][T11422] xt_CT: No such helper "pptp" 23:41:54 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x160, 0x9403, 0x52020000, 0x160, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'sit0\x00', 'lo\x00', {}, {}, 0x6c}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:41:54 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket$kcm(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r11, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000000)={r11}, 0x8) keyctl$chown(0x9, r2, r1, 0x0) 23:41:54 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000019000755a84a5bd02310a00002000000", 0x14}], 0x1}, 0x0) 23:41:54 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x37fffd, @ipv4={[], [], @empty}}, 0x1c) [ 408.663377][T11432] xt_CT: No such helper "pptp" 23:41:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x0, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1040000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44140, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 408.848435][T11440] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 408.856942][T11440] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 408.865653][T11440] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='-/#\v%%\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) 23:41:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x37fffd, @ipv4={[], [], @empty}}, 0x1c) 23:41:55 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r6, r5, 0x0) r7 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a5", 0xb1}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8}], 0x1, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x78, 0x0, 0x6, {0x5, 0x4, 0x0, {0x0, 0x3, 0x9, 0x4, 0x5d, 0x100000000, 0x7, 0x7, 0x667, 0x1, 0x1f, r5, r8, 0x80000000, 0x4}}}, 0x78) keyctl$chown(0x9, r3, r2, 0x0) r9 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x6, 0x1d5, 0x0, 0x7d, 0x5}, &(0x7f0000000180)=0x14) 23:41:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'team_slave_1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x7}}) 23:41:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x37fffd, @ipv4={[], [], @empty}}, 0x1c) 23:41:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x0, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1040000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44140, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:41:55 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00'}) keyctl$chown(0x9, r2, r1, 0x0) [ 409.619841][T11466] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x37fffd, @ipv4={[], [], @empty}}, 0x1c) 23:41:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'team_slave_1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x7}}) 23:41:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1040000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44140, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:41:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x0, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:56 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) 23:41:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'team_slave_1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x7}}) 23:41:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) socket(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$dupfd(r1, 0x0, r2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r4, r3, 0x0) [ 410.096161][T11479] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1040000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44140, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:41:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x0, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'team_slave_1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x7}}) 23:41:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000007050200cf1f02004000000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x2}}}, 0x24}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x811) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}]}, 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x20000041) r7 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040811}, 0x4004090) 23:41:56 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) 23:41:56 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x9, 0x0, r1, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x21}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20048804) [ 410.597610][T11496] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x0, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:56 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) 23:41:57 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) [ 411.076350][T11523] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:57 executing program 2: socket(0x10, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000cab000)=0x42) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r4, r3, 0x0) 23:41:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 23:41:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800030b00000000000000000a00000000000000000000000800171f00000000"], 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x8) ioctl$VT_WAITACTIVE(r3, 0x5607) 23:41:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x0, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:57 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) 23:41:57 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) [ 411.584216][T11537] validate_nla: 8 callbacks suppressed [ 411.584246][T11537] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 411.598474][T11537] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 411.606931][T11537] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.642128][ C0] hrtimer: interrupt took 256484 ns 23:41:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0xe, r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$chown(0x9, r3, r1, 0x0) 23:41:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000040)={0x1, 0x9}) r6 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:41:57 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) 23:41:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0x4}]}, 0x3c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@initdev}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x38}}, 0x140) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 23:41:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 23:41:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x0, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:58 executing program 2: r0 = socket(0x25, 0x2, 0x8000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r3}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r3}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1010}, 0x4000000) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x80000000}) socketpair$unix(0x1, 0x40000000000004, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1}) r8 = fcntl$dupfd(r1, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x40, 0x2, 0x2}) [ 412.374131][T11558] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 412.382696][T11558] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 412.390929][T11558] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x1810a2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) r1 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2"], 0x200}}, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x186c1, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) semop(r1, &(0x7f0000000100), 0x2d) semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_STAT_ANY(r1, 0x0, 0x14, &(0x7f0000000000)=""/80) 23:41:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) r1 = socket$kcm(0x10, 0x5, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={0x0, r7}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x1, 0xffffff53, "8c7a035538a0bceeceede8a41de7c3f704cb9a441f459256dadd347c1b0f34e498470a545c3ed048d84e9619ae649bb49cdced93d60e9be5cbb79beface072591be9aea510b726d2e15d4c9732cd82903fca33fee320a65a8bdc5ff11af7f2c217c4fd4fffaa69af0ee6d11173c1126806eaafb4e0118b1555307be06f9dd27693570def1af4a38bfbf007b4d701f2433e65304ee19e2bbf7222b059352ad40f53a7be7c54d76d3eae095af2ec9cc6f8ae83e79d77e3855f42a6bdc277c4db695ca35c3eb5b1cd253671ec5477575d85f0bc228db805c561c10370a3576bf4f342bf2111630e7c508679ca05925582399120de863f7bba18c1d4af9ee92d9faf", 0x80, 0x2, 0x1f, 0x0, 0x5, 0x1, 0x1}, r7}}, 0x120) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x80, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3ff}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004400}, 0x4040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r0, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000100)=0xff00) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000002040)="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") personality(0x200000) 23:41:58 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xfffffffffffffd9a) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x2, 0x3, 0x4, 0x3}}, 0x26) keyctl$chown(0x9, r3, r2, 0x0) 23:41:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) [ 412.919641][T11570] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.5'. [ 412.929916][T11570] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'. 23:41:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0x4}]}, 0x3c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@initdev}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x38}}, 0x140) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 23:41:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x0, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:41:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3000}, [@RTA_EXPIRES={0x8, 0x17, 0xfffffffe}]}, 0x24}, 0x1, 0x0, 0x0, 0xc855}, 0x0) 23:41:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) [ 413.506566][T11570] team0: Port device veth3 added [ 413.571322][T11584] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 413.580606][T11584] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 413.588943][T11584] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:59 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80200, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x1412, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x340400d5) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r3, r2, 0x0) 23:42:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x0, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:42:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x800000000007, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffee2, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:42:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "9cb9ded29b001c002038a40379703c21"}) [ 414.380125][T11601] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 414.388563][T11601] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 414.397072][T11601] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:42:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x1810a2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) r1 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2"], 0x200}}, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x186c1, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) semop(r1, &(0x7f0000000100), 0x2d) semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_STAT_ANY(r1, 0x0, 0x14, &(0x7f0000000000)=""/80) 23:42:00 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x64, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008091}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x24040011) 23:42:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800030b00000000000000000a0000000000000000000000080017000000000048aa4b4b147a45f186afcf701bdff030618c255290931c67c274c77484ee3136d08236642d4d7ec245cf91f1e20a039f185f3e1fc1b586052ee0fed5bed7be9b47172a54a4f2079ffb5df223444f4913522cd5c4bd4be3bf7164d937c64eb71b893201055b60662cf984d6b60fee7d205cd8785466b74b3ce326c8cab48c1e43fa7378d64ec3061627abfdb5687150154bd95f95ec29b939c3e58bf117eaffa68d71a4567beed4239e13bc9db1417afd77659e73df866a5adbbbbedb9694a70855c8116502eaf6e5fe6dfd78cfbc83bf61d9"], 0x24}}, 0x0) 23:42:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "9cb9ded29b001c002038a40379703c21"}) [ 414.749320][T11607] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.5'. [ 414.759376][T11607] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'. 23:42:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0x4}]}, 0x3c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@initdev}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x38}}, 0x140) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 23:42:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 415.190690][T11607] team0: Port device veth5 added 23:42:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "9cb9ded29b001c002038a40379703c21"}) 23:42:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x1810a2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) r1 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2"], 0x200}}, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x186c1, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) semop(r1, &(0x7f0000000100), 0x2d) semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_STAT_ANY(r1, 0x0, 0x14, &(0x7f0000000000)=""/80) 23:42:01 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) chmod(&(0x7f0000000000)='./file0\x00', 0x102) keyctl$chown(0x9, r2, r1, 0x0) 23:42:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x1, 0x500}, [@RTA_EXPIRES={0x34}]}, 0x24}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x680c00, 0x0) r1 = socket$inet6(0xa, 0xa, 0x7) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r3}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r3}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@private1, r3}, 0x14) [ 415.523748][T11627] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 415.532994][T11627] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 415.541220][T11627] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 415.687109][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "9cb9ded29b001c002038a40379703c21"}) 23:42:02 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000080)=0x28) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x9, r2, r1, 0x0) 23:42:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 416.502768][T11640] team0: Port device veth7 added [ 416.683206][T11651] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 416.691671][T11651] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 416.699884][T11651] __nla_validate_parse: 3 callbacks suppressed [ 416.699910][T11651] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:42:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x1810a2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) r1 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2"], 0x200}}, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x186c1, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) semop(r1, &(0x7f0000000100), 0x2d) semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_STAT_ANY(r1, 0x0, 0x14, &(0x7f0000000000)=""/80) 23:42:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x1, 0x2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0cf8384591a8e100003eddcbcccc82051f54916f74bbe4c8251800030000272c2d1f2f2d0a002684d408df000000008000"/64], 0x24}}, 0x0) r4 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)={0x7ff, 0x1, 0x4, 0x800, 0x8, {0x0, 0xea60}, {0x7, 0x8, 0x1, 0x7f, 0xcf, 0x2, "94fd035c"}, 0x7, 0x4, @planes=&(0x7f0000000000)={0x1ff, 0x5, @userptr=0x10001, 0xfffffffd}, 0x3f}) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x3}) 23:42:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0x4}]}, 0x3c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@initdev}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x38}}, 0x140) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 417.057322][T11660] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.5'. [ 417.070257][T11660] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'. 23:42:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=ANY=[@ANYBLOB="4b00000012"]}) 23:42:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 417.606849][T11660] team0: Port device veth9 added [ 417.814953][T11678] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 417.824114][T11678] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 417.832669][T11678] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:42:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r2}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r2}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) r3 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_getrule={0x0, 0x22, 0x2, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x14, 0x8, 0xc0, 0x0, 0x0, 0x7, 0x10001}, ["", "", "", ""]}, 0x8a}}, 0x20004000) 23:42:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=ANY=[@ANYBLOB="4b00000012"]}) 23:42:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 23:42:04 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 23:42:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f0f6d079b000c48299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e9b422bb0b4179b314a", 0xff7c}], 0x1) [ 418.508165][T11687] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 418.516900][T11687] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 418.525517][T11687] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:42:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=ANY=[@ANYBLOB="4b00000012"]}) 23:42:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 419.019340][T11695] netlink: 'syz-executor.1': attribute type 31 has an invalid length. 23:42:05 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x3}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20000800) socket$kcm(0x2, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r5, 0xffffffffffffffff, 0x0) r6 = eventfd(0x9) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r5, 0xf709, 0xffff8000, r6}) socket$inet6_sctp(0xa, 0x1, 0x84) [ 419.019373][T11695] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 419.019406][T11695] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:42:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=ANY=[@ANYBLOB="4b00000012"]}) 23:42:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@deltclass={0x44, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x1a}, {0x7, 0x6}, {0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x22, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x98}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 419.310137][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 419.332860][T11698] device bond0 entered promiscuous mode [ 419.338505][T11698] device bond_slave_0 entered promiscuous mode [ 419.345443][T11698] device bond_slave_1 entered promiscuous mode [ 419.354506][T11698] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 419.597543][T11698] device bond0 left promiscuous mode [ 419.604832][T11698] device bond_slave_0 left promiscuous mode [ 419.611820][T11698] device bond_slave_1 left promiscuous mode [ 420.001955][T11710] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 420.010617][T11710] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 420.019744][T11710] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 23:42:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f0f6d079b000c48299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e9b422bb0b4179b314a", 0xff7c}], 0x1) [ 420.099879][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 420.121641][T11701] device bond0 entered promiscuous mode [ 420.127294][T11701] device bond_slave_0 entered promiscuous mode [ 420.134424][T11701] device bond_slave_1 entered promiscuous mode [ 420.142978][T11701] 8021q: adding VLAN 0 to HW filter on device macvlan2 23:42:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r4}, 0x3c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@can_delroute={0x1c, 0x19, 0x300, 0x70bd2c, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_DST_IF={0x8}]}, 0x1c}}, 0x20000080) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000011000/0x1000)=nil) r6 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000011000/0x1000)=nil) shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r6, 0xb) shmctl$SHM_UNLOCK(r6, 0xc) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000007000/0x2000)=nil, 0x0) shmctl$SHM_LOCK(r5, 0xb) shmctl$SHM_UNLOCK(r5, 0xc) shmctl$SHM_LOCK(r5, 0xb) shmctl$IPC_RMID(r5, 0x0) 23:42:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) socket(0x10, 0x80002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) pipe(&(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 23:42:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0xb03, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x47, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000280)={@can={0x1d, r6}, {0x0}, &(0x7f0000000000), 0x11}, 0xa0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x3e, 0x0, 0x40, 0x8, 0x52, @local, @local, 0x700, 0x10, 0x1000, 0x10000}}) sendmsg$nl_route_sched(r1, 0x0, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) [ 420.489318][T11724] ===================================================== [ 420.489348][T11724] BUG: KMSAN: uninit-value in xa_load+0x83b/0x8a0 [ 420.489371][T11724] CPU: 1 PID: 11724 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 420.489381][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.489389][T11724] Call Trace: [ 420.489418][T11724] dump_stack+0x1df/0x240 [ 420.489452][T11724] kmsan_report+0xf7/0x1e0 [ 420.489483][T11724] __msan_warning+0x58/0xa0 [ 420.489511][T11724] xa_load+0x83b/0x8a0 [ 420.489556][T11724] ucma_get_ctx+0x7f/0x310 [ 420.489582][T11724] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 420.489608][T11724] ucma_accept+0x259/0xc90 [ 420.489648][T11724] ? kmsan_get_metadata+0x4f/0x180 [ 420.489671][T11724] ? kmsan_set_origin_checked+0x95/0xf0 [ 420.489696][T11724] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 420.489726][T11724] ? _copy_from_user+0x15b/0x260 [ 420.489747][T11724] ? kmsan_get_metadata+0x4f/0x180 [ 420.489775][T11724] ? ucma_listen+0x470/0x470 [ 420.489804][T11724] ucma_write+0x5c5/0x630 [ 420.489936][T11724] do_iter_write+0x710/0xdc0 [ 420.489989][T11724] ? ucma_get_global_nl_info+0xe0/0xe0 [ 420.490015][T11724] do_writev+0x42d/0x8f0 [ 420.490061][T11724] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 420.490085][T11724] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 420.490110][T11724] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 420.490148][T11724] __se_sys_writev+0x9b/0xb0 [ 420.490182][T11724] __x64_sys_writev+0x4a/0x70 [ 420.490211][T11724] do_syscall_64+0xb0/0x150 [ 420.490241][T11724] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 420.490257][T11724] RIP: 0033:0x45c1d9 [ 420.490266][T11724] Code: Bad RIP value. [ 420.490279][T11724] RSP: 002b:00007f772e7fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 420.490300][T11724] RAX: ffffffffffffffda RBX: 0000000000037880 RCX: 000000000045c1d9 [ 420.490313][T11724] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 420.490326][T11724] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 420.490339][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 420.490351][T11724] R13: 0000000000c9fb6f R14: 00007f772e7ff9c0 R15: 000000000078bf0c [ 420.490378][T11724] [ 420.490388][T11724] Local variable ----cmd@ucma_accept created at: [ 420.490409][T11724] ucma_accept+0x95/0xc90 [ 420.490428][T11724] ucma_accept+0x95/0xc90 [ 420.490435][T11724] ===================================================== [ 420.490443][T11724] Disabling lock debugging due to kernel taint [ 420.490456][T11724] Kernel panic - not syncing: panic_on_warn set ... [ 420.490480][T11724] CPU: 1 PID: 11724 Comm: syz-executor.4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 420.490492][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.490500][T11724] Call Trace: [ 420.490529][T11724] dump_stack+0x1df/0x240 [ 420.490562][T11724] panic+0x3d5/0xc3e [ 420.490626][T11724] kmsan_report+0x1df/0x1e0 [ 420.490657][T11724] __msan_warning+0x58/0xa0 [ 420.490686][T11724] xa_load+0x83b/0x8a0 [ 420.490729][T11724] ucma_get_ctx+0x7f/0x310 [ 420.490756][T11724] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 420.490782][T11724] ucma_accept+0x259/0xc90 [ 420.490823][T11724] ? kmsan_get_metadata+0x4f/0x180 [ 420.490846][T11724] ? kmsan_set_origin_checked+0x95/0xf0 [ 420.490871][T11724] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 420.490901][T11724] ? _copy_from_user+0x15b/0x260 [ 420.490921][T11724] ? kmsan_get_metadata+0x4f/0x180 [ 420.490950][T11724] ? ucma_listen+0x470/0x470 [ 420.490980][T11724] ucma_write+0x5c5/0x630 [ 420.491024][T11724] do_iter_write+0x710/0xdc0 [ 420.491071][T11724] ? ucma_get_global_nl_info+0xe0/0xe0 [ 420.491098][T11724] do_writev+0x42d/0x8f0 [ 420.491151][T11724] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 420.491178][T11724] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 420.491202][T11724] ? __prepare_exit_to_usermode+0x16c/0x4d0 [ 420.491239][T11724] __se_sys_writev+0x9b/0xb0 [ 420.491276][T11724] __x64_sys_writev+0x4a/0x70 [ 420.491302][T11724] do_syscall_64+0xb0/0x150 [ 420.491333][T11724] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 420.491349][T11724] RIP: 0033:0x45c1d9 [ 420.491357][T11724] Code: Bad RIP value. [ 420.491369][T11724] RSP: 002b:00007f772e7fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 420.491390][T11724] RAX: ffffffffffffffda RBX: 0000000000037880 RCX: 000000000045c1d9 [ 420.491402][T11724] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 420.491415][T11724] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 420.491428][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 420.491441][T11724] R13: 0000000000c9fb6f R14: 00007f772e7ff9c0 R15: 000000000078bf0c [ 420.492937][T11724] Kernel Offset: 0x2c200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 420.968187][T11724] Rebooting in 86400 seconds..