fffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000087800000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0xd7, 0x1b06, &(0x7f0000000600)="518a4a47d4af1672c0a82308a0d703842ce267679ab335809c72ab88475e148e3e05a342f54bf9d4ab721225b78b0036a9d095c879131830509d07d8d3372b052919348460614c56b9b4dd980faa1cbdc6ec9ca3a5985368c7788e82280131a9aa8e84e50d17524049d1a1481d796de9471859377365dcc9f66fa433fd915170b0f4aac4c22b14f0b3c148a13039270b4b0738bd310b896d40184c5cbfb89458dc79f39a05313a364d94154441ed66b697172127490e4c6b0f024258fc567af3753461821800dbd8d4bcf959d1d913551bbf292c27b41fc5512fb2", &(0x7f0000000700)="1065303d6ca9283098ff36163166361ebff49df118c8eea986f9357ab0b23992c35d33ef4b7e5b6694fa754faca2c40eb74013cf02692984fa7e3e8732cfd5bc2fcb1635e2b1ab1af9c5ac633b6c997d5838d3426f1e7324326ee8d841a2ec7fd854c0a1ac2018ab0f5ccfc418b750e48d685ec14a3865860b3b15ec6013c87ee79f204dd0e22d86", 0xdb, 0x88}) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000380)="d8f6daec4cd99f12a73e7f504f66ced49d69ec8bd5d6abdd3b52aaa864b100000c21dcebef8aaec393f85a2a3653c4c5e307ece1f2a88fc9401806660d8f76fc3acfe31e70992c470c00f592c11d341aceb5223e18000000000000000000", &(0x7f0000000280)="bff670c52d669a50aebfa44b5383d9027bb5bc61d6fff3a365b4a1fb3766798fe6e74e28dc47f47823162f8b7f22357accc3947af7b2de144c1d59b36f84737bd1bdede3984e32f426e4d125dd41bee2e7245044c2aad5fba81da81588748fbc202b90edfab66892a750e7ce2243b011edaed75c7e1d19c2bb70dcf6a9e469e88a61755b523b41813c08e6afe36891a8c9211a4e4f21182ec8a9569fa8f44c4c1e37fba14104f46ea37a344fc0b8f2b3ef28d7e259006afc5d8a67e901cc3e8816f846f9d65c9fb1fb42fe7076eec46c2fbcfd9736e76a830d15c2", 0x3}, 0x20) 09:45:05 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) listen(r1, 0x40000000007) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0xfffffdc9, 0x0, 0x0, &(0x7f0000000000)=ANY=[]}, 0x20000000) close(r0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="83312391e6a48ddbc6d54ac9f0f7ac79e12c63c85e688ae6e683a9e858370db5095cf87bdb0c772501287cd9960e3cd73de2dd0756415c", 0x37) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x400, 0xf50f) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x200, 0x0) 09:45:05 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x80) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r2], 0x1c}, 0x0) close(r0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x3ff, 0x4, 0xffffffff, 0x2, 0x1, 0x0, [], r2, r3}, 0x3c) 09:45:05 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80, 0x80) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000040)={0x11, ""/17}) 09:45:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) syz_emit_ethernet(0x0, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="46ac3024ea740e8b69540765ad2a55", 0xf) openat$cgroup_ro(r1, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000001c0)={0x0, 0x7e, 0x0, 0x6}, 0x10) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xed41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x13a62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x4000, 0x0, 0x0, 0x400000000000, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0xffe, 0x0, 0x0, 0x0, 0x3, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r2 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdc1) ioctl(0xffffffffffffffff, 0x422, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r5}) dup3(r5, r4, 0x0) lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000000)=@known='user./yz\xff', &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0x19a, 0x0) ioctl(r2, 0x10000, &(0x7f0000000140)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)) [ 1293.331571][ T1439] validate_nla: 13 callbacks suppressed [ 1293.331592][ T1439] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1293.501335][ T1403] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:06 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x2, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:06 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c416e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b83be8a2b75d8e1fc007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) listen(r0, 0x5) r4 = socket$unix(0x1, 0x5, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r4], 0x1c}, 0x0) close(r0) r5 = socket$unix(0x1, 0x5, 0x0) connect(r5, &(0x7f0000931ff4)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e27, 0x7}}, 0x80) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1293.620873][ T1399] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1293.859383][ T1423] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:06 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0xe, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:06 executing program 4: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000009000/0x1000)=nil) setrlimit(0x8, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004e00), 0x4924d64, 0x0) 09:45:06 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x5b81030000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1294.035065][ T1447] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:06 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000097ffffff}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:06 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0xa, 0x5, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000)='tr\x03\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0xa4, 0x1) r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x3e1) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000100)={0x20, {{0x2, 0x4e23, @empty}}}, 0x88) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x60, 0x0, 0x7, {{0xfffffffffffffffd, 0x401, 0x0, 0x2e1d, 0x0, 0x9, 0x100, 0x1}}}, 0x60) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200000, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000240)) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x800, 0x10000) 09:45:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000100)=[@transaction={0x630b, {0x630c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1294.197138][ T1478] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1294.296008][ T1514] binder: 1507:1514 unknown command 0 [ 1294.310344][ T1514] binder: 1507:1514 ioctl c0306201 200001c0 returned -22 09:45:07 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xfffffda9, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}}], 0x18a, 0x0, 0x0) 09:45:07 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18002000006e17719ebcce40ed040029a87190852bfc367e4600000040", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1294.570625][ T1498] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:07 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 09:45:07 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000580)={0x3, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000600)={0x0, 0xbd, 0x0, &(0x7f00000005c0)=0x1000}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/65, 0x41}, {&(0x7f0000000100)=""/172, 0xac}, {&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000380)=""/180, 0xb4}], 0x5, &(0x7f00000004c0)=""/96, 0x60}, 0x10000) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1294.950331][ T1502] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1295.100383][ T1516] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1295.223676][ T1482] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:08 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x3, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:08 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002fc0)={'vcan0\x00', 0x0}) connect(r1, &(0x7f0000931ff4)=@ll={0x11, 0x5, r3, 0x1, 0x800}, 0x80) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18de23155810b98d240a0000000000000001000000d4f8e6000400007c00000000d8595578d67e9722def25ec011f1544bdd71f49545", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4000000000000000, 0x400000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000000c0)={0xfff, 0x5, 0x2ab, 0x0, 0x8}, 0x14) r6 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) connect$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:08 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x10, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:08 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="7400000024000b0508000000000000edffffff00", @ANYRES32=r2, @ANYBLOB="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"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x10, &(0x7f0000000100), 0xc}], 0x492492492492642, 0x0) 09:45:08 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x5c81030000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:08 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe0000009effffff}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:08 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x800) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800ec0008", @ANYRES32=r0, @ANYRES64=r1], 0x11}, 0x4008000) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xae) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendto$unix(r1, &(0x7f0000000000)="6277ee77cd945725a4fa6ec08199e1b00b39ee1a1bc5e7c049e0e92ef30313f8f4351b2c4166cba6887b2e139c4d0682d4fc9f9387ca0e71c396e3b4263ba274e883026b9913bb227823b1cc0a1ea725c972dfb271406c896c340183abe43e96e797fb45f447e4df885dc084e6", 0x6d, 0x4080, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:08 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) pselect6(0x40, &(0x7f0000000040)={0xffff, 0x2, 0x300000000000, 0x9, 0x8, 0x4, 0xd3, 0x6702}, &(0x7f0000000100)={0x1, 0x7, 0xffffffffffffff38, 0x1000, 0x2, 0x7fffffff, 0xfff}, &(0x7f0000000140)={0x80000001, 0x81, 0x10001, 0x1f, 0x0, 0x3, 0x85, 0x100000000}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={0x74a}, 0x8}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x100000000805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={r5}, 0x14) close(r2) munlockall() setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r5, 0x8001}, 0x8) 09:45:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x204200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000380)="5f8d09bcd8a3f938832e0f3aeed6f07faca7780beccd1fed1484281ddaecaba85d31e4dfcfdbade6172c4b1420451dabe625a968ad8517d91f78b7c1654feffccf009c", &(0x7f0000000040)}, 0x25a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) write$ppp(r1, &(0x7f0000000280)="1191b57265fdc28aba1279fea4e54bc903c47f340cb494ce58aa743f7622422f484b67ab23ed3898aca44f67ef644dd01d43822822fff4630e01b1a9f4d45598c0f2f4f2899e40435d55a33178aae9a02181703c79093aef5c0acd4505567723f4560b200e58c64435bb3a9171573ccbc4d200cf30568f2a7b3f249df9c5e9c587d48bc05e0fb5ca1e70bf6712160ebc6f065ada34372996777f6850e0b9c39a0dabffcc8dc8b9662a7b3d2f6acd57e2e45f957c50e05381106dce8c861b17894eb2dc1fb42dd4ef9ef93abb6a9f5ff0f0c9815645004b2e379088994dae167e", 0xe0) 09:45:08 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x60, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xa750}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000140)={r4, @in={{0x2, 0x4e23, @local}}, 0xffffffffffffffff, 0x5, 0x7, 0x1, 0x7fff}, &(0x7f0000000200)=0x98) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:08 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:08 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x2, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:09 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x4, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:09 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) accept4(r1, 0x0, &(0x7f0000000000), 0x81000) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r2], 0x1c}, 0x0) close(r0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:10 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x3e, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:10 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4874, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:10 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x5d81030000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:10 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000c1020000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:10 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) bind$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/840]}, 0x3c0) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRESDEC=r3], 0x28}, 0x0) close(r0) r4 = socket$unix(0x1, 0x5, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)=r5) 09:45:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0xe, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="36a15c2145066d320000000000000009", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:11 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4874, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) [ 1298.432229][ T1630] validate_nla: 13 callbacks suppressed [ 1298.432238][ T1630] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup(r0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000000)={0x631f, 0xffffffff, 0x9, 0x55, &(0x7f0000000180)=""/85, 0xe3, &(0x7f0000000200)=""/227, 0xaf, &(0x7f0000000300)=""/175}) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000100", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) stat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)) close(r0) connect(0xffffffffffffffff, &(0x7f0000931ff4)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0xffffffffffffff70) r3 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x2, 0x4000) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000400)=0x1, 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000000c0)={0x9, 0x2, 0x4, 0x0, 'syz0\x00', 0x2}) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) syz_extract_tcp_res(&(0x7f0000000080), 0xffffffffffffff02, 0x6) bind$vsock_dgram(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 1298.746679][ T1636] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1298.908564][ T1641] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1299.025444][ T1626] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:11 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x5, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e22}, 0xffffff58) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1299.142742][ T1633] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1299.344739][ T1671] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:12 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x48, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:12 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x3, @rand_addr="3ee07b46797cecc56de935c569e41849", 0x7}, @in6={0xa, 0x4e22, 0x2, @empty, 0x7}]}, &(0x7f00000000c0)=0x10) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"]}, 0x4c3) r5 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]}, 0x3c9) r6 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r7 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r8 = socket(0xa, 0x5, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r9, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, &(0x7f0000000140)={0x1, 0x9}) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYPTR64, @ANYRESDEC, @ANYPTR=&(0x7f0000000900)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYBLOB="ad83d02265b57ca77caff096434e4e52b8041943a2f396e7dc27636a2c17eefba8ce2ee906d97759a830e23c645d7ba3b44e2aa3c66e8cd3de2a91c1e4bc538f8b302c942b76eff7312eab2e62f7a57e6a1b137bdaff5debd8da203828e18c530880943f80df8f39a41688c0c5", @ANYBLOB="6eb5c279d7cbbf149b011f6354901df4170f78f7d52543147010ebead810f1632a7a46d4596b629d67bce31ce981437484a30de16f3883d27aa7a5d0fa79b0a809bf2e2fe7f1d80d0b9bf105136435ce5ef693ffdc547d9256c2b5a8a0c6086bb3327bf45fb32b3c4e19ffc56af4ee0ba20aab7bae5dd5156b7b3b2810633ef8c283331931f33711293bc84671ebc5c32c1e186de344feb8f6c164e4f0df5c8fae9e5ddbf4c74a542bfe1844a4b9c09f4a93a0ad45cefa4494540d6b04e8fe97c871f7c1b13860ef4ae4957b5b6eaa01c805986abcdebcd8b5d45d4b8768c3308b03b9f7263ef059", @ANYRES16=r3, @ANYRESOCT=r4, @ANYRESOCT=0x0, @ANYPTR, @ANYPTR64, @ANYRESOCT=r0], @ANYRES16, @ANYBLOB="c7c02fd5b710b47ed2e6597dbc8db944407572c62ac81871f681aa0be10ddd89909b770981c668abbccc88c9f86f8f7c3fc1554d05b0b8e9859ebc67db046196e6389a88528fd516824f459d7a40c6e9f933391f7a6f747fe3b7dc57e2", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES64=r2], @ANYRESHEX, @ANYPTR64], @ANYBLOB="bf940bb407db4a5f561d4d1bd497de3d5790f1a6ec19d2c4758025538e6688bf36aa8ee4696aa5c8fcab54b9b370b828091620affde5d35299ef9d10cc7a7e5687e8bf9df94cf4a01ff96a99edf6ecb233408c01766ca7b14494dcb61f24ddcc27059407994f97dc", @ANYRES16=r8], 0xf5}, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) close(r0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) ioctl$EXT4_IOC_GROUP_EXTEND(r11, 0x40086607, &(0x7f0000000100)=0x600000000) connect(r10, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1299.566238][ T1670] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 1299.806265][ T1643] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:12 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x5e81030000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:12 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000e4ffffff}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:12 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000001c566364f000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7f, 0x0) write$P9_RLOCK(r3, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:12 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x0) setgroups(0x0, 0x0) open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[], 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x40000000, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xdc6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0xfffffffffffffffa) unshare(0x40000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x401, 0x1, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000)='_', &(0x7f0000000040)}, 0x20) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) recvfrom(r3, &(0x7f0000000040)=""/51, 0x33, 0xe5e56e4ca4b0939a, &(0x7f0000000080)=@caif=@dgm={0x25, 0xff, 0x3ff}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1299.957047][ T1696] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:12 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x1}, 0xc) r7 = socket$unix(0x1, 0x5, 0x0) connect(r7, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r8 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) sendmsg$unix(r8, 0x0, 0x80000) r9 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xdc, r10, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7b5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x367d5345}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc4f8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8040}, 0x48100) [ 1300.148424][ T1732] IPVS: ftp: loaded support on port[0] = 21 [ 1300.299258][ T1704] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:13 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1300.584022][ T1760] FAULT_INJECTION: forcing a failure. [ 1300.584022][ T1760] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.624720][ T1760] CPU: 0 PID: 1760 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1300.632217][ T1760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1300.642276][ T1760] Call Trace: [ 1300.645601][ T1760] dump_stack+0x172/0x1f0 [ 1300.649960][ T1760] should_fail.cold+0xa/0x15 [ 1300.654562][ T1760] ? release_sock+0x156/0x1c0 [ 1300.659248][ T1760] ? fault_create_debugfs_attr+0x180/0x180 [ 1300.665100][ T1760] ? page_to_nid.part.0+0x20/0x20 [ 1300.665116][ T1760] ? ___might_sleep+0x163/0x280 [ 1300.665136][ T1760] __should_failslab+0x121/0x190 [ 1300.665154][ T1760] should_failslab+0x9/0x14 [ 1300.665167][ T1760] kmem_cache_alloc_node+0x268/0x740 [ 1300.665191][ T1760] __alloc_skb+0xd5/0x5e0 [ 1300.665206][ T1760] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1300.665223][ T1760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1300.665237][ T1760] ? netlink_autobind.isra.0+0x228/0x310 [ 1300.665251][ T1760] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 1300.665271][ T1760] netlink_sendmsg+0x972/0xd60 [ 1300.675243][ T1760] ? netlink_unicast+0x710/0x710 [ 1300.675259][ T1760] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1300.675278][ T1760] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1300.675295][ T1760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1300.675309][ T1760] ? security_socket_sendmsg+0x8d/0xc0 [ 1300.675322][ T1760] ? netlink_unicast+0x710/0x710 [ 1300.675338][ T1760] sock_sendmsg+0xd7/0x130 [ 1300.675352][ T1760] ___sys_sendmsg+0x803/0x920 [ 1300.675366][ T1760] ? copy_msghdr_from_user+0x440/0x440 [ 1300.675385][ T1760] ? __fget+0xa3/0x560 [ 1300.684798][ T1760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1300.684818][ T1760] ? __fget+0x384/0x560 [ 1300.684837][ T1760] ? ksys_dup3+0x3e0/0x3e0 [ 1300.684860][ T1760] ? __fget_light+0x1a9/0x230 [ 1300.684874][ T1760] ? __fdget+0x1b/0x20 [ 1300.684887][ T1760] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1300.684904][ T1760] __sys_sendmsg+0x105/0x1d0 [ 1300.684918][ T1760] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1300.684948][ T1760] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1300.705862][ T1760] __x64_sys_sendmsg+0x78/0xb0 09:45:13 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1300.705882][ T1760] do_syscall_64+0xfa/0x760 [ 1300.705903][ T1760] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1300.705914][ T1760] RIP: 0033:0x4598e9 [ 1300.705928][ T1760] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1300.705934][ T1760] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1300.705947][ T1760] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 [ 1300.705954][ T1760] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1300.705961][ T1760] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1300.705969][ T1760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27c6ba46d4 [ 1300.705983][ T1760] R13: 00000000004c711b R14: 00000000004dc828 R15: 0000000000000004 [ 1300.904952][ T1766] FAULT_INJECTION: forcing a failure. [ 1300.904952][ T1766] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.939126][ T1766] CPU: 0 PID: 1766 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1300.946629][ T1766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1300.956687][ T1766] Call Trace: [ 1300.956714][ T1766] dump_stack+0x172/0x1f0 [ 1300.956737][ T1766] should_fail.cold+0xa/0x15 [ 1300.956756][ T1766] ? fault_create_debugfs_attr+0x180/0x180 [ 1300.956772][ T1766] ? page_to_nid.part.0+0x20/0x20 [ 1300.956788][ T1766] ? ___might_sleep+0x163/0x280 [ 1300.956808][ T1766] __should_failslab+0x121/0x190 [ 1300.956825][ T1766] should_failslab+0x9/0x14 [ 1300.956836][ T1766] kmem_cache_alloc_node_trace+0x274/0x750 [ 1300.956855][ T1766] ? kasan_unpoison_shadow+0x35/0x50 [ 1300.964454][ T1766] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1300.964480][ T1766] __kmalloc_node_track_caller+0x3d/0x70 [ 1300.964499][ T1766] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1300.964515][ T1766] __alloc_skb+0x10b/0x5e0 [ 1300.964531][ T1766] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1300.964551][ T1766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 09:45:13 executing program 4 (fault-call:1 fault-nth:2): r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1300.974911][ T1766] ? netlink_autobind.isra.0+0x228/0x310 [ 1300.974930][ T1766] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 1300.974948][ T1766] netlink_sendmsg+0x972/0xd60 [ 1300.974968][ T1766] ? netlink_unicast+0x710/0x710 [ 1300.974981][ T1766] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1300.974997][ T1766] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1300.975012][ T1766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1300.975025][ T1766] ? security_socket_sendmsg+0x8d/0xc0 [ 1300.975043][ T1766] ? netlink_unicast+0x710/0x710 [ 1300.984896][ T1766] sock_sendmsg+0xd7/0x130 [ 1300.984912][ T1766] ___sys_sendmsg+0x803/0x920 [ 1300.984929][ T1766] ? copy_msghdr_from_user+0x440/0x440 [ 1300.984947][ T1766] ? __fget+0xa3/0x560 [ 1300.984964][ T1766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1300.984984][ T1766] ? __fget+0x384/0x560 [ 1300.994391][ T1766] ? ksys_dup3+0x3e0/0x3e0 [ 1300.994413][ T1766] ? __fget_light+0x1a9/0x230 [ 1300.994428][ T1766] ? __fdget+0x1b/0x20 [ 1300.994442][ T1766] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1300.994459][ T1766] __sys_sendmsg+0x105/0x1d0 [ 1300.994479][ T1766] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1300.994507][ T1766] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1301.005564][ T1766] __x64_sys_sendmsg+0x78/0xb0 [ 1301.005583][ T1766] do_syscall_64+0xfa/0x760 [ 1301.005603][ T1766] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1301.005614][ T1766] RIP: 0033:0x4598e9 [ 1301.005629][ T1766] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1301.005636][ T1766] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1301.017040][ T1766] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 [ 1301.017048][ T1766] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1301.017057][ T1766] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1301.017066][ T1766] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27c6ba46d4 [ 1301.017074][ T1766] R13: 00000000004c711b R14: 00000000004dc828 R15: 0000000000000004 [ 1301.114957][ T1774] FAULT_INJECTION: forcing a failure. [ 1301.114957][ T1774] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.143437][ T1774] CPU: 0 PID: 1774 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1301.158053][ T1774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1301.168504][ T1774] Call Trace: [ 1301.168524][ T1774] dump_stack+0x172/0x1f0 [ 1301.168543][ T1774] should_fail.cold+0xa/0x15 [ 1301.168555][ T1774] ? debug_smp_processor_id+0x3c/0x214 [ 1301.168570][ T1774] ? fault_create_debugfs_attr+0x180/0x180 [ 1301.168595][ T1774] __should_failslab+0x121/0x190 [ 1301.193367][ T1774] should_failslab+0x9/0x14 [ 1301.193380][ T1774] kmem_cache_alloc+0x47/0x710 [ 1301.193393][ T1774] ? lock_acquire+0x190/0x410 [ 1301.193408][ T1774] ? netlink_deliver_tap+0x146/0xbf0 [ 1301.193430][ T1774] skb_clone+0x154/0x3d0 [ 1301.209789][ T1774] netlink_deliver_tap+0x94d/0xbf0 [ 1301.209810][ T1774] netlink_unicast+0x5a2/0x710 [ 1301.209827][ T1774] ? netlink_attachskb+0x7c0/0x7c0 [ 1301.209847][ T1774] ? _copy_from_iter_full+0x25d/0x8a0 [ 1301.225777][ T1774] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1301.241682][ T1774] ? __check_object_size+0x3d/0x437 [ 1301.241702][ T1774] netlink_sendmsg+0x8a5/0xd60 [ 1301.241719][ T1774] ? netlink_unicast+0x710/0x710 [ 1301.241734][ T1774] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1301.241749][ T1774] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1301.241762][ T1774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1301.241781][ T1774] ? security_socket_sendmsg+0x8d/0xc0 [ 1301.261784][ T1774] ? netlink_unicast+0x710/0x710 [ 1301.275176][ T1774] sock_sendmsg+0xd7/0x130 [ 1301.275190][ T1774] ___sys_sendmsg+0x803/0x920 [ 1301.275205][ T1774] ? copy_msghdr_from_user+0x440/0x440 [ 1301.275223][ T1774] ? __fget+0xa3/0x560 [ 1301.275238][ T1774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1301.275256][ T1774] ? __fget+0x384/0x560 [ 1301.284150][ T1774] ? ksys_dup3+0x3e0/0x3e0 [ 1301.284171][ T1774] ? __fget_light+0x1a9/0x230 [ 1301.284184][ T1774] ? __fdget+0x1b/0x20 [ 1301.284197][ T1774] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1301.284213][ T1774] __sys_sendmsg+0x105/0x1d0 [ 1301.284230][ T1774] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1301.295467][ T1774] ? switch_fpu_return+0x1fa/0x4f0 [ 1301.295486][ T1774] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1301.295504][ T1774] __x64_sys_sendmsg+0x78/0xb0 [ 1301.295520][ T1774] do_syscall_64+0xfa/0x760 [ 1301.295539][ T1774] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1301.304976][ T1774] RIP: 0033:0x4598e9 [ 1301.304990][ T1774] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1301.304998][ T1774] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1301.305010][ T1774] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 [ 1301.305017][ T1774] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1301.305030][ T1774] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1301.314526][ T1774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27c6ba46d4 [ 1301.314534][ T1774] R13: 00000000004c711b R14: 00000000004dc828 R15: 0000000000000004 [ 1301.555039][ T1774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:14 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:14 executing program 4 (fault-call:1 fault-nth:3): r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1301.685210][ T1782] FAULT_INJECTION: forcing a failure. [ 1301.685210][ T1782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1301.698456][ T1782] CPU: 1 PID: 1782 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1301.705913][ T1782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1301.715966][ T1782] Call Trace: [ 1301.719257][ T1782] dump_stack+0x172/0x1f0 [ 1301.723589][ T1782] should_fail.cold+0xa/0x15 [ 1301.728187][ T1782] ? fault_create_debugfs_attr+0x180/0x180 [ 1301.733997][ T1782] ? perf_trace_lock+0xeb/0x4c0 [ 1301.738851][ T1782] should_fail_alloc_page+0x50/0x60 [ 1301.744043][ T1782] __alloc_pages_nodemask+0x1a1/0x900 [ 1301.749443][ T1782] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1301.749462][ T1782] ? ____cache_alloc_node+0x160/0x1d0 [ 1301.760541][ T1782] ? lock_downgrade+0x920/0x920 [ 1301.760560][ T1782] cache_grow_begin+0x90/0xd20 [ 1301.770127][ T1782] ? __kasan_check_read+0x11/0x20 [ 1301.770147][ T1782] ? do_raw_spin_unlock+0x57/0x270 [ 1301.780254][ T1782] ____cache_alloc_node+0x17a/0x1d0 [ 1301.785457][ T1782] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1301.791788][ T1782] kmem_cache_alloc_node_trace+0xec/0x750 [ 1301.797500][ T1782] ? kasan_unpoison_shadow+0x35/0x50 [ 1301.797519][ T1782] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1301.808688][ T1782] __kmalloc_node_track_caller+0x3d/0x70 [ 1301.814343][ T1782] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1301.819722][ T1782] __alloc_skb+0x10b/0x5e0 [ 1301.824168][ T1782] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1301.829293][ T1782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1301.835529][ T1782] ? netlink_autobind.isra.0+0x228/0x310 [ 1301.841162][ T1782] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 1301.847412][ T1782] netlink_sendmsg+0x972/0xd60 [ 1301.852222][ T1782] ? netlink_unicast+0x710/0x710 [ 1301.857175][ T1782] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1301.862838][ T1782] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1301.868310][ T1782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1301.874563][ T1782] ? security_socket_sendmsg+0x8d/0xc0 [ 1301.880038][ T1782] ? netlink_unicast+0x710/0x710 [ 1301.885090][ T1782] sock_sendmsg+0xd7/0x130 [ 1301.889514][ T1782] ___sys_sendmsg+0x803/0x920 [ 1301.894196][ T1782] ? copy_msghdr_from_user+0x440/0x440 [ 1301.899664][ T1782] ? __fget+0xa3/0x560 [ 1301.903734][ T1782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1301.909973][ T1782] ? __fget+0x384/0x560 [ 1301.914129][ T1782] ? ksys_dup3+0x3e0/0x3e0 [ 1301.918569][ T1782] ? __fget_light+0x1a9/0x230 [ 1301.923257][ T1782] ? __fdget+0x1b/0x20 [ 1301.927335][ T1782] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1301.933572][ T1782] __sys_sendmsg+0x105/0x1d0 [ 1301.938155][ T1782] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1301.943178][ T1782] ? switch_fpu_return+0x1fa/0x4f0 [ 1301.948289][ T1782] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1301.954357][ T1782] __x64_sys_sendmsg+0x78/0xb0 [ 1301.959120][ T1782] do_syscall_64+0xfa/0x760 [ 1301.963630][ T1782] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1301.969512][ T1782] RIP: 0033:0x4598e9 [ 1301.973399][ T1782] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1301.993079][ T1782] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1302.002524][ T1782] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 [ 1302.010485][ T1782] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1302.018446][ T1782] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1302.026409][ T1782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27c6ba46d4 [ 1302.034371][ T1782] R13: 00000000004c711b R14: 00000000004dc828 R15: 0000000000000004 [ 1302.074954][ T1782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:15 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x4c, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:15 executing program 4 (fault-call:1 fault-nth:4): r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1302.487294][ T1791] FAULT_INJECTION: forcing a failure. [ 1302.487294][ T1791] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1302.500530][ T1791] CPU: 1 PID: 1791 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1302.507983][ T1791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1302.518057][ T1791] Call Trace: [ 1302.521392][ T1791] dump_stack+0x172/0x1f0 [ 1302.525735][ T1791] should_fail.cold+0xa/0x15 [ 1302.530339][ T1791] ? fault_create_debugfs_attr+0x180/0x180 [ 1302.536271][ T1791] ? perf_trace_lock+0xeb/0x4c0 [ 1302.541149][ T1791] should_fail_alloc_page+0x50/0x60 [ 1302.546422][ T1791] __alloc_pages_nodemask+0x1a1/0x900 [ 1302.551784][ T1791] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1302.557487][ T1791] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1302.563109][ T1791] ? __kasan_check_read+0x11/0x20 [ 1302.568129][ T1791] ? fault_create_debugfs_attr+0x180/0x180 [ 1302.573927][ T1791] cache_grow_begin+0x90/0xd20 [ 1302.578675][ T1791] ? fib6_info_alloc+0xb6/0x1b0 [ 1302.583515][ T1791] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1302.589743][ T1791] kmem_cache_alloc_trace+0x6b3/0x790 [ 1302.595105][ T1791] fib6_info_alloc+0xb6/0x1b0 [ 1302.599772][ T1791] ip6_route_info_create+0x2fe/0x1530 [ 1302.605136][ T1791] ip6_route_multipath_add+0x3dd/0x14b0 [ 1302.610663][ T1791] ? rtm_to_fib6_config+0xd76/0x1480 [ 1302.615947][ T1791] ? ip6_route_mpath_notify+0xf0/0xf0 [ 1302.621323][ T1791] ? __kasan_check_read+0x11/0x20 [ 1302.626330][ T1791] ? do_raw_spin_unlock+0x57/0x270 [ 1302.631444][ T1791] inet6_rtm_newroute+0xed/0x180 [ 1302.636379][ T1791] ? ip6_route_multipath_add+0x14b0/0x14b0 [ 1302.642203][ T1791] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 1302.647338][ T1791] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1302.653566][ T1791] ? ip6_route_multipath_add+0x14b0/0x14b0 [ 1302.659362][ T1791] rtnetlink_rcv_msg+0x463/0xb00 [ 1302.664286][ T1791] ? rtnetlink_put_metrics+0x580/0x580 [ 1302.669758][ T1791] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1302.675031][ T1791] ? __copy_skb_header+0x250/0x550 [ 1302.680135][ T1791] netlink_rcv_skb+0x177/0x450 [ 1302.684919][ T1791] ? rtnetlink_put_metrics+0x580/0x580 [ 1302.690367][ T1791] ? netlink_ack+0xb30/0xb30 [ 1302.694946][ T1791] ? netlink_deliver_tap+0x254/0xbf0 [ 1302.700216][ T1791] rtnetlink_rcv+0x1d/0x30 [ 1302.704626][ T1791] netlink_unicast+0x531/0x710 [ 1302.709373][ T1791] ? netlink_attachskb+0x7c0/0x7c0 [ 1302.714476][ T1791] ? _copy_from_iter_full+0x25d/0x8a0 [ 1302.719832][ T1791] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1302.725541][ T1791] ? __check_object_size+0x3d/0x437 [ 1302.730728][ T1791] netlink_sendmsg+0x8a5/0xd60 [ 1302.735478][ T1791] ? netlink_unicast+0x710/0x710 [ 1302.740410][ T1791] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1302.745945][ T1791] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1302.751386][ T1791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1302.757609][ T1791] ? security_socket_sendmsg+0x8d/0xc0 [ 1302.763047][ T1791] ? netlink_unicast+0x710/0x710 [ 1302.767970][ T1791] sock_sendmsg+0xd7/0x130 [ 1302.772366][ T1791] ___sys_sendmsg+0x803/0x920 [ 1302.777038][ T1791] ? copy_msghdr_from_user+0x440/0x440 [ 1302.782490][ T1791] ? __fget+0xa3/0x560 [ 1302.786551][ T1791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1302.792775][ T1791] ? __fget+0x384/0x560 [ 1302.796926][ T1791] ? ksys_dup3+0x3e0/0x3e0 [ 1302.801414][ T1791] ? __fget_light+0x1a9/0x230 [ 1302.806071][ T1791] ? __fdget+0x1b/0x20 [ 1302.810125][ T1791] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1302.816350][ T1791] __sys_sendmsg+0x105/0x1d0 [ 1302.820920][ T1791] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1302.825938][ T1791] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1302.831985][ T1791] __x64_sys_sendmsg+0x78/0xb0 [ 1302.836734][ T1791] do_syscall_64+0xfa/0x760 [ 1302.841230][ T1791] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1302.847103][ T1791] RIP: 0033:0x4598e9 [ 1302.850986][ T1791] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1302.870570][ T1791] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1302.878961][ T1791] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 [ 1302.886915][ T1791] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1302.894869][ T1791] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1302.902837][ T1791] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27c6ba46d4 [ 1302.910802][ T1791] R13: 00000000004c711b R14: 00000000004dc828 R15: 0000000000000004 [ 1302.920906][ T1791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:15 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x5f81030000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:15 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000f0ffffff}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:15 executing program 4 (fault-call:1 fault-nth:5): r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:15 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES64=r2], 0x1c}, 0x0) close(r1) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1303.328675][ T1813] FAULT_INJECTION: forcing a failure. [ 1303.328675][ T1813] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1303.341917][ T1813] CPU: 1 PID: 1813 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1303.341926][ T1813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.341930][ T1813] Call Trace: [ 1303.341952][ T1813] dump_stack+0x172/0x1f0 [ 1303.341975][ T1813] should_fail.cold+0xa/0x15 [ 1303.341996][ T1813] ? fault_create_debugfs_attr+0x180/0x180 [ 1303.359492][ T1813] ? perf_trace_lock+0xeb/0x4c0 [ 1303.359512][ T1813] should_fail_alloc_page+0x50/0x60 [ 1303.359526][ T1813] __alloc_pages_nodemask+0x1a1/0x900 [ 1303.359546][ T1813] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1303.399232][ T1813] ? ____cache_alloc_node+0x160/0x1d0 [ 1303.404605][ T1813] ? lock_downgrade+0x920/0x920 [ 1303.409453][ T1813] cache_grow_begin+0x90/0xd20 [ 1303.414215][ T1813] ? __kasan_check_read+0x11/0x20 [ 1303.419233][ T1813] ? do_raw_spin_unlock+0x57/0x270 [ 1303.424346][ T1813] ____cache_alloc_node+0x17a/0x1d0 [ 1303.429629][ T1813] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1303.435850][ T1813] kmem_cache_alloc_trace+0x21c/0x790 [ 1303.441269][ T1813] fib6_info_alloc+0xb6/0x1b0 [ 1303.445929][ T1813] ip6_route_info_create+0x2fe/0x1530 [ 1303.451294][ T1813] ip6_route_multipath_add+0x3dd/0x14b0 [ 1303.456830][ T1813] ? rtm_to_fib6_config+0xd76/0x1480 [ 1303.462123][ T1813] ? ip6_route_mpath_notify+0xf0/0xf0 [ 1303.467493][ T1813] ? __kasan_check_read+0x11/0x20 [ 1303.472601][ T1813] ? do_raw_spin_unlock+0x57/0x270 [ 1303.477713][ T1813] inet6_rtm_newroute+0xed/0x180 [ 1303.482635][ T1813] ? ip6_route_multipath_add+0x14b0/0x14b0 [ 1303.488443][ T1813] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1303.494690][ T1813] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 1303.500372][ T1813] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1303.506709][ T1813] ? ip6_route_multipath_add+0x14b0/0x14b0 [ 1303.512512][ T1813] rtnetlink_rcv_msg+0x463/0xb00 [ 1303.517435][ T1813] ? rtnetlink_put_metrics+0x580/0x580 [ 1303.522877][ T1813] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1303.528147][ T1813] ? __copy_skb_header+0x250/0x550 [ 1303.533250][ T1813] netlink_rcv_skb+0x177/0x450 [ 1303.537993][ T1813] ? rtnetlink_put_metrics+0x580/0x580 [ 1303.543431][ T1813] ? netlink_ack+0xb30/0xb30 [ 1303.548003][ T1813] ? netlink_deliver_tap+0x254/0xbf0 [ 1303.553282][ T1813] rtnetlink_rcv+0x1d/0x30 [ 1303.557678][ T1813] netlink_unicast+0x531/0x710 [ 1303.562431][ T1813] ? netlink_attachskb+0x7c0/0x7c0 [ 1303.567547][ T1813] ? _copy_from_iter_full+0x25d/0x8a0 [ 1303.572904][ T1813] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1303.578787][ T1813] ? __check_object_size+0x3d/0x437 [ 1303.583977][ T1813] netlink_sendmsg+0x8a5/0xd60 [ 1303.588745][ T1813] ? netlink_unicast+0x710/0x710 [ 1303.593692][ T1813] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1303.599229][ T1813] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1303.604678][ T1813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1303.610907][ T1813] ? security_socket_sendmsg+0x8d/0xc0 [ 1303.616362][ T1813] ? netlink_unicast+0x710/0x710 [ 1303.621283][ T1813] sock_sendmsg+0xd7/0x130 [ 1303.625746][ T1813] ___sys_sendmsg+0x803/0x920 [ 1303.630418][ T1813] ? copy_msghdr_from_user+0x440/0x440 [ 1303.635872][ T1813] ? __fget+0xa3/0x560 [ 1303.639941][ T1813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1303.646309][ T1813] ? __fget+0x384/0x560 [ 1303.652124][ T1813] ? ksys_dup3+0x3e0/0x3e0 [ 1303.656541][ T1813] ? __fget_light+0x1a9/0x230 [ 1303.661214][ T1813] ? __fdget+0x1b/0x20 [ 1303.665271][ T1813] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1303.671500][ T1813] __sys_sendmsg+0x105/0x1d0 [ 1303.676088][ T1813] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1303.681182][ T1813] ? switch_fpu_return+0x1fa/0x4f0 [ 1303.686305][ T1813] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1303.692382][ T1813] __x64_sys_sendmsg+0x78/0xb0 [ 1303.697139][ T1813] do_syscall_64+0xfa/0x760 [ 1303.701636][ T1813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1303.707505][ T1813] RIP: 0033:0x4598e9 [ 1303.711381][ T1813] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1303.730966][ T1813] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1303.739356][ T1813] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 [ 1303.747319][ T1813] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1303.755268][ T1813] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1303.763228][ T1813] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27c6ba46d4 [ 1303.771176][ T1813] R13: 00000000004c711b R14: 00000000004dc828 R15: 0000000000000004 09:45:16 executing program 4 (fault-call:1 fault-nth:6): r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1303.781081][ T1813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1303.808428][ T1795] validate_nla: 7 callbacks suppressed [ 1303.808437][ T1795] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1303.939351][ T1832] FAULT_INJECTION: forcing a failure. [ 1303.939351][ T1832] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.957734][ T1832] CPU: 1 PID: 1832 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1303.965212][ T1832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.975260][ T1832] Call Trace: [ 1303.978554][ T1832] dump_stack+0x172/0x1f0 [ 1303.982904][ T1832] should_fail.cold+0xa/0x15 [ 1303.987509][ T1832] ? fault_create_debugfs_attr+0x180/0x180 [ 1303.993321][ T1832] ? page_to_nid.part.0+0x20/0x20 [ 1303.998348][ T1832] ? ___might_sleep+0x163/0x280 [ 1304.003206][ T1832] __should_failslab+0x121/0x190 [ 1304.008161][ T1832] should_failslab+0x9/0x14 [ 1304.012655][ T1832] kmem_cache_alloc_trace+0x2d3/0x790 [ 1304.018014][ T1832] ? ip6_route_info_create+0xae5/0x1530 [ 1304.023550][ T1832] ip6_route_multipath_add+0x53b/0x14b0 [ 1304.029086][ T1832] ? ip6_route_mpath_notify+0xf0/0xf0 [ 1304.034456][ T1832] ? __kasan_check_read+0x11/0x20 [ 1304.039483][ T1832] ? do_raw_spin_unlock+0x57/0x270 [ 1304.044592][ T1832] inet6_rtm_newroute+0xed/0x180 [ 1304.049522][ T1832] ? ip6_route_multipath_add+0x14b0/0x14b0 [ 1304.055325][ T1832] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 1304.060434][ T1832] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1304.066661][ T1832] ? ip6_route_multipath_add+0x14b0/0x14b0 [ 1304.072453][ T1832] rtnetlink_rcv_msg+0x463/0xb00 [ 1304.077376][ T1832] ? rtnetlink_put_metrics+0x580/0x580 [ 1304.082818][ T1832] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1304.088086][ T1832] ? __copy_skb_header+0x250/0x550 [ 1304.093187][ T1832] netlink_rcv_skb+0x177/0x450 [ 1304.097934][ T1832] ? rtnetlink_put_metrics+0x580/0x580 [ 1304.103379][ T1832] ? netlink_ack+0xb30/0xb30 [ 1304.107958][ T1832] ? netlink_deliver_tap+0x254/0xbf0 [ 1304.113227][ T1832] rtnetlink_rcv+0x1d/0x30 [ 1304.117626][ T1832] netlink_unicast+0x531/0x710 [ 1304.122382][ T1832] ? netlink_attachskb+0x7c0/0x7c0 [ 1304.127479][ T1832] ? _copy_from_iter_full+0x25d/0x8a0 [ 1304.132846][ T1832] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1304.138635][ T1832] ? __check_object_size+0x3d/0x437 [ 1304.143830][ T1832] netlink_sendmsg+0x8a5/0xd60 [ 1304.148580][ T1832] ? netlink_unicast+0x710/0x710 [ 1304.153502][ T1832] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1304.159032][ T1832] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1304.164581][ T1832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1304.170902][ T1832] ? security_socket_sendmsg+0x8d/0xc0 [ 1304.176352][ T1832] ? netlink_unicast+0x710/0x710 [ 1304.181277][ T1832] sock_sendmsg+0xd7/0x130 [ 1304.185681][ T1832] ___sys_sendmsg+0x803/0x920 [ 1304.190341][ T1832] ? copy_msghdr_from_user+0x440/0x440 [ 1304.195893][ T1832] ? __fget+0xa3/0x560 [ 1304.199959][ T1832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1304.206187][ T1832] ? __fget+0x384/0x560 [ 1304.210330][ T1832] ? ksys_dup3+0x3e0/0x3e0 [ 1304.214737][ T1832] ? __fget_light+0x1a9/0x230 [ 1304.219395][ T1832] ? __fdget+0x1b/0x20 [ 1304.223447][ T1832] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1304.229679][ T1832] __sys_sendmsg+0x105/0x1d0 [ 1304.234259][ T1832] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1304.239290][ T1832] ? switch_fpu_return+0x1fa/0x4f0 [ 1304.244389][ T1832] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1304.250444][ T1832] __x64_sys_sendmsg+0x78/0xb0 [ 1304.255202][ T1832] do_syscall_64+0xfa/0x760 [ 1304.259692][ T1832] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1304.265586][ T1832] RIP: 0033:0x4598e9 [ 1304.269475][ T1832] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1304.289087][ T1832] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1304.297479][ T1832] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 [ 1304.305442][ T1832] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1304.314440][ T1832] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1304.322397][ T1832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27c6ba46d4 [ 1304.330350][ T1832] R13: 00000000004c711b R14: 00000000004dc828 R15: 0000000000000004 09:45:17 executing program 4 (fault-call:1 fault-nth:7): r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:17 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x8, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1304.404047][ T1786] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:17 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x1f, 0x2, 0xfffffffffffffffd}, 0x10) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) fsync(r3) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000100001e010000004699046d5c112a76cd89013d67a2d5fd", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r4 = socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)) [ 1304.763766][ T1819] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:17 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x7, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:17 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1305.089453][ T1818] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1305.290378][ T1797] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:18 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x60, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:18 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000a37d7f92ba4438319a71a5480500bba699bda34de0fe9cd9484af8878a1f69d08af9e0a0e4a6062b8772c9bfa7cbb9bd21ec76056f9232ba12476f834473436662e698c0ab117f5aa1e3401d35bcc12ea083f2d75fecb7", @ANYRES32=r0, @ANYRES64=r2], 0x1c}, 0x0) close(r0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r5 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r6 = socket(0xa, 0x5, 0x0) socket(0x11, 0x1, 0x13a2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r7 = dup(r6) ioctl$ASHMEM_GET_PROT_MASK(r7, 0x7706, &(0x7f0000000000)) dup2(r4, r5) [ 1305.460658][ T1827] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1305.740244][ T1833] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:18 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6000000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:18 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000fdffffff}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:18 executing program 4: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) socket$inet6(0x10, 0x1200000000003, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="550000f8000000000000000838fa5f7f7005fe01b2a4a270930a601480fea843029104000039000900150008000500140f081001f3678b80142314e9030b7e1b68a5b16732009b1104b1df13000000fb0000000100000000", 0x55}], 0x1}, 0x594eddd902a3bf6c) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) 09:45:18 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1305.948927][ T1871] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:18 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xb, 0x442) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r2], 0x1c}, 0x0) close(r0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={'vcan0\x00', {0x2, 0x4e23, @rand_addr=0x8}}) 09:45:18 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/116, 0xfe03}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000000240)=""/136, 0x88}], 0x1, &(0x7f00000000c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0x100000000005}}]}, 0x800) r1 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:18 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000040)={0x3, 0x10000, [0x7f, 0x7, 0xcce, 0x6, 0x401], 0x9}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e21, @rand_addr=0x1}]}, &(0x7f0000000200)=0x10) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x7fffffff, @local, 0x2}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @rand_addr=0x3}], 0x6c) ioctl$NBD_DO_IT(r3, 0xab03) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="050004007f000100080001001d35cf8706813c42a280be2bdd7c1b0cd91105392165f090c4344a5ac1256497ccca90d924004c98d79070ead3067c9a05112e51c01ba1ef0bfc6cd83228b3ac726831274a1d0fb3ce6e6df40635267cabb3a798d6ae738cdddf45b6a6cc4e9c5ec22ce1018c3dac2e8ef777fed267d9b4230eb90251868d20bc39dd369920aa3e8ca36ea9f029eb7eb6c75c8cd7b4d7057167432dff4d4e81fd2cb362ac"], &(0x7f0000000280)=0x10) 09:45:19 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)}, 0x4000800) prctl$PR_GET_KEEPCAPS(0x7) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@dev, @in=@local}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000180)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) [ 1306.300006][ T1879] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1306.506589][ T1872] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:19 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x8, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:19 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x6, 0x7ff}]}, 0x10) r1 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1306.808885][ T1956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1306.820195][ T1959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:19 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x68, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:19 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) openat$cgroup_type(r1, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000180)=0x1e) preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) openat(r2, &(0x7f0000000080)='./file0\x00', 0x40400, 0x16) fcntl$getown(r2, 0x9) r3 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x74) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000}, 0x1c) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1307.306652][ T1972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:20 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6081030000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:20 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000fffff000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:20 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0x8}, 0x2) listen(r0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000080000000000000080", @ANYRES32=r0, @ANYRES64=r2], 0x1c}, 0x0) close(r0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:20 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x3, 0x0, 0x1, {0xa, 0x4e20, 0xe491, @local, 0x7}}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000080)="c7b6f5afcc54e94f2c4ad5e24ff1030000009b82310dac78c091a8f0da5c9da8ca9406698c6915043f", 0x29}, {&(0x7f0000000180)="31e3426de470fdd9b8fe91922b57fd82ef5f03151d70d2f684a0528b00393bfca4fadd882f23d2a6319a13d9975fc7ecdc923d710522c2a2dea528a16ed9959519a359f3857240c7d0b35239f957e2055562777dcff83042840547be8f866542a19d14157085d5f6", 0x68}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000000c0)="3ee45da7484caeea", 0x8}, {&(0x7f0000000200)="099374c25e4011ec5c8c476ac52191ec4cabaa22784e801bfe55bc95d3d343e178ec2053a8adaeed1e3766adfd5d50e50ee03e38c31c89ab3c6d5f4bda127b3eb663df58b7b0d261ce01496608c51fe86fbc53e7094b54bc008537e47a9627275b79b8cd7d0f9061904b44f8022d7b3de92426f48c8314850ddeca6ddc7bf2036990cf4e6876c8d6a60346c378536defaaf5b9278b79c46b6517e3", 0x9b}], 0x5, &(0x7f0000001400)=[{0x50, 0x100, 0x3, "f2826307a3e5155cb968119be3f43ce1725a46630c3c18f260c0979b404d89596e3d2d5e43db592ff5de3d4a97a585d73b5dd3df15a4c4cc41"}, {0x60, 0x114, 0x0, "d6b59e9afab5b7d6d5a4d18d37d67012b7f04c8e50e997920461b75f42329fad2b2ae3fd02ce14eccfa2478f5e91900c33ea1d7c79a1939aee3a97da3a0f9a6afda5e4197a91580dc7730675d4f7fc"}, {0xc0, 0x11, 0x4, "84a4b9623fcd7ccee3cc872975260e613e7167f475b9b63ad715eea0aa707687ebf9651ebb19ae14958c58270930ee22fee98129f9bcfc1b5ff3938f423f179430f30ee78b43090a34831b39e201af6f82e01c60d4b7d6b26fa09a29cc5a959c9898f76984dddb19c8b7a5fcd70746cc795dd9a04e9e7ba38c816068027ee7ba7ce7a9c08ffbfeb4e6687f4aa5e4c2e50586ddcd1fb9ce13fec572fe993eb97df3e00a2c2b0d8481b01f"}, {0xa8, 0x10a, 0x5a, "61a5f2ee1401dd2c2b348f1ce7ad75953f480668593d671ec56b877f63e9cfce43e313208f5fc2b63a16e83e67ee50eeef021d370448afb00cfe7f2c1ce101825f460168d3dc4e4530f4d47ef2e18620001da8064c9c23634d22082cec05102963286aed60fcecd466204d9bfeaf5f3adb472723c098c322bef6a2e94f21b48eedf2f50e78787ab1dd9c0f1d21e7d6f61a4c016dd4d1"}, {0xf8, 0x114, 0x1, "65c6dc7cf59adf5dee11d5a5e959981e2e4eff74024124305ec95417d62d09a91e9951ccf7e075a5865c8f02fc3f8ac6742e6c77f0b84ff94f980e5a8bbbab892491010000000000000024b87ee858f8ee3380d6b0404aa0f3a8f7b496ed41326d3bb37b7701ac57269dc121681602762e1082d2583a6629f0d9a76c4ec4f6bd914712aa9d1208fecda95a5cbfee239b3bcd6692b3cf5f93fe010da580b60848a796505814e49b628893241ad5c661b5c85298d7f06936563634b668aed9676e1fa4be558d0c67ef2e10d8a30968ddf98f406b6dc564a49d622c5e11f98e7c245f"}, {0x98, 0x29, 0x3, "7951a385f119e34eab6e65fc662ee005b0e045f9cf9f3baf343851d0145c20a0fbf0f33845571f7c17540b887f075e875c91e3beb7d947fc13098f994b398eb77615c0ae32a2da956c2bea7305e8c6742333ef4e7152b73776ab74d389db50487ddd6bd70c5ddc67497ddc9cd28785bbc15116dfc27dcb0f9a9f67e64677fbeec32ef4c7e2800bb7"}], 0x3a8}, 0x40040080) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:20 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000)=0x5c, 0x4) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket$rds(0x15, 0x5, 0x0) getsockname(r3, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000040)=0x80) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/15, @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r4 = socket$unix(0x1, 0x5, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 09:45:20 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000900000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x40100) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8100, 0x0) r5 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000800)=0xe8) recvfrom$packet(r4, &(0x7f0000000900)=""/4096, 0x1000, 0x10000, &(0x7f0000000840)={0x11, 0x2, r6, 0x1, 0x8, 0x6, @dev={[], 0x1d}}, 0x14) r7 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) sendmsg$unix(r7, 0x0, 0x4000842) 09:45:20 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1308.181233][ T1992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:20 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), 0x2f6, 0x0, 0x156}, 0x404c800) 09:45:21 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xa, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:21 executing program 4: r0 = socket$inet6(0x10, 0x120000000000b, 0x2) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081014e9030b975668a5b16732009b1104a5df13000000fb00"/85, 0x135}], 0x1}, 0x2008021) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@get={0x1, &(0x7f0000000000)=""/241, 0x3f}) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000200)={0xfffffffffffffff9, 0x1f, 0x2, 0x8, 0x23, 0x1ff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000002", @ANYRES16=r2, @ANYBLOB="020829bd7000fddbdf250d000000400002000800020001000000040004000800010003000000080001000700000008000200050000000800010000080000080002003c0800000800010004000000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) 09:45:21 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x6c, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:21 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000ffffff7f}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1308.922140][ T1982] validate_nla: 11 callbacks suppressed [ 1308.922150][ T1982] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1309.104555][ T2040] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:21 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6181030000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:21 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:21 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x30c00, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000040)=0x1) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x80) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:22 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000002980)={'bridge0\x00', {0x2, 0x4e21, @local}}) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) recvmmsg(r4, &(0x7f0000004a80)=[{{&(0x7f0000000000)=@l2, 0x80, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/169, 0xa9}, {&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/131, 0x83}, {&(0x7f0000001380)=""/51, 0x33}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x7}, 0x6}, {{&(0x7f0000002440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f00000024c0)=""/127, 0x7f}, {&(0x7f0000002540)=""/152, 0x98}, {&(0x7f0000002600)=""/107, 0x6b}, {&(0x7f0000002680)=""/110, 0x6e}], 0x4, &(0x7f0000002740)=""/162, 0xa2}, 0x48c46d79}, {{&(0x7f0000002800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002880)=""/194, 0xc2}, {&(0x7f0000002980)}, {&(0x7f00000029c0)=""/73, 0x49}, {&(0x7f0000002a40)=""/65, 0x41}, {&(0x7f0000002ac0)=""/30, 0x1e}, {&(0x7f0000002b00)=""/92, 0x5c}, {&(0x7f0000002b80)=""/43, 0x2b}, {&(0x7f0000002bc0)=""/225, 0xe1}, {&(0x7f0000002cc0)=""/17, 0x11}], 0x9, &(0x7f0000002dc0)=""/68, 0x44}, 0x4}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e40)=""/50, 0x32}, {&(0x7f0000002e80)}, {&(0x7f0000002ec0)=""/34, 0x22}], 0x3, &(0x7f0000002f40)=""/155, 0x9b}, 0x401}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003080)=""/133, 0x85}, {&(0x7f0000003140)=""/205, 0xcd}, {&(0x7f0000003240)=""/144, 0x90}, {&(0x7f0000003300)=""/45, 0x2d}, {&(0x7f0000003340)}, {&(0x7f0000003380)=""/188, 0xbc}, {&(0x7f0000003440)=""/53, 0x35}], 0x7, &(0x7f0000003500)=""/4096, 0x1000}, 0xffffffffffffff01}, {{&(0x7f0000004500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004580)=""/38, 0x26}, {&(0x7f00000045c0)=""/236, 0xec}, {&(0x7f00000046c0)=""/37, 0x25}, {&(0x7f0000004700)=""/141, 0x8d}, {&(0x7f00000047c0)=""/95, 0x5f}, {&(0x7f0000004840)=""/118, 0x76}, {&(0x7f00000048c0)}], 0x7, &(0x7f0000004980)=""/244, 0xf4}, 0x7}], 0x6, 0x26001, 0x0) r5 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000002e80), &(0x7f0000003340)=0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1309.570087][ T2052] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1309.860133][ T2051] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:22 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000000c0)=0x7, 0x4) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) getsockname$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 1309.986553][ T2062] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:22 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0xa2, &(0x7f0000000300), 0x41d, 0x0, 0xfffffffffffffd92}, 0x4) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) [ 1310.134115][ T2085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.148981][ T2085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:22 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x6c8, 0x2c0, 0x2c0, 0x4e8, 0x4e8, 0x4e8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5, &(0x7f0000000000), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [0xffffffff, 0xff000000, 0x1fffffffe], [0xffffffff, 0xffffffff, 0xff], 'nr0\x00', 'tunl0\x00', {0x615912bcaf0e45a9}, {0xff}, 0x2b, 0x9, 0x3, 0x61}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x0, 0x5}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d2, 0x2f, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1c, @ipv6=@mcast1, @ipv4=@loopback, @port=0x4e23, @gre_key=0x3}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, [0x808000ff, 0xffffff00, 0xff000000, 0xffffff00], [0xffffff00, 0xff000000], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x5c, 0x9, 0x7, 0x41ff74630703ba9e}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x7f, 0x0, 0x3, [0x1, 0x2, 0x5, 0x6, 0x10001, 0xd4, 0x6, 0xf983, 0x6, 0x5a2c, 0x2b, 0x3b5a, 0xffff, 0x3, 0x100, 0x3], 0x3}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xa, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@empty, @port=0x4e23, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x9, 0x7, 0x80000001, 0x8, 0x0, 0x4, [@rand_addr="3430572bc18bc637a77cd060b8eab027", @loopback, @mcast1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @local, @mcast2, @empty, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr="be07a2cfd583fc5290b600f98055f920", @rand_addr="d5450b96a49336c77c8dbabfe396c276", @mcast2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}, @loopback, @dev={0xfe, 0x80, [], 0x12}], 0xe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x4e8}}, {{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@dev={0xfe, 0x80, [], 0x16}, @ipv6=@mcast2, @gre_key=0x4, @gre_key=0x80000000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x728) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1310.211769][ T2043] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:23 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000001100)={@pptp={0x18, 0x2, {0x2, @rand_addr=0x3}}, {&(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000000000), 0x29}, 0xa0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) write$P9_ROPEN(r3, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x0, 0x0, 0x4}}}, 0x18) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x500000000000000) fsmount(r4, 0x1, 0x84) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r5 = socket$unix(0x1, 0x5, 0x0) connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1310.442656][ T2101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.482342][ T2110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:23 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xe, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:23 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) [ 1310.522834][ T2078] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1310.673943][ T2116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.687995][ T2116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.747440][ T2053] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:23 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x74, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:23 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x2f8, &(0x7f0000000300), 0x1, 0x0, 0x7c9c}, 0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/185, 0xb9, 0xc9, &(0x7f0000000100)={r1, r2+30000000}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0x7, 0x6, 0x5, 0x9, 0x9, 0xc6, 0x3f, 0x2}, &(0x7f0000000180)={0x9, 0x101, 0x0, 0x800, 0x7ff, 0x7fffffff, 0x6, 0x10000}, &(0x7f00000001c0)={0x7fff, 0xb9a, 0x0, 0x0, 0x4, 0x3733, 0x6, 0x6}, &(0x7f0000000240)={r3, r4+10000000}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) [ 1310.919370][ T2064] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:23 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6281030000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:23 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000ffffff97}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1311.088125][ T2119] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:23 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000080)=""/58, &(0x7f00000000c0)=0x3a) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) sendmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r2, @ANYRES32=r0, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESHEX, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="eac43ae8401dd5582540b68b4a265f9444fa9b8cb5fd028e89d91141f9fadb1f75cc0032b14dd910e59370a8023641a801c7a4b3cedeb9e8d1e83f85db5c1d6661e844c8afeb9dd0bef3b6ffea6d271401fa4dd301d9ca354d71ce24732d68fa669225cef475fe60d25ba720a44358ad72d26030b6a64614ba0b86e436dde567e6b6e985b3840a3a9377c485f10a0f1d7b271a14a38b4a27d71d29c46a36e88a35cc56cb991d67e540996baef8375a1ef9c4d292bd3947044335adc172e1e791db99060103ab37b70509c74ef808f98776208e16b961816a05bfd0b4a4caeed97d23bfe244e2717bf960194d5e5e0c"], @ANYRESDEC=r0], 0x4b}, 0x0) close(r0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000000180)=@nl=@kern={0x10, 0x0, 0x0, 0x88004002}, 0xe4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:24 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'syzkaller0\x00', 0x3}) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:25 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x10, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:25 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffff801, 0x0) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180fa581aa3a7470dff30823ba00000000000001004a0000000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) semget$private(0x0, 0x0, 0xa33) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) sendmsg$unix(r0, 0x0, 0x4000100) 09:45:25 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/204, 0xcc) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:25 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) sendto(r3, &(0x7f0000000180)="6da9503a68cd11bf80497018ec19ac6524302d5ab97ed2f525e59601001b4407dabf7c8d24ac52b66be449bff2a9fd37fca8abe196d6d11c4bb29129318fd72d53aebfa5f8e30457537f", 0x4a, 0x200c8000, &(0x7f0000000200)=@can={0x1d, r7}, 0x80) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r8 = dup2(r1, r1) r9 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x100, 0x7, 0x7f}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000100)={r10, 0xffff, 0x6, [0x8, 0x8a, 0x8000, 0x400, 0x1, 0x7]}, &(0x7f0000000140)=0x14) [ 1312.501269][ T2183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1312.518777][ T2185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:25 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = shmget(0x2, 0x2000, 0x1414, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000640)=""/160) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r2 = socket(0xa, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@remote, @in=@remote, 0x4e20, 0x5, 0x4e22, 0xfffffffffffffffa, 0xa, 0xa0, 0x20, 0x5e, 0x0, r3}, {0x80000001, 0x3f, 0x100000000, 0x0, 0x0, 0x100, 0x8, 0x1000}, {0x8, 0x0, 0x8, 0x101}, 0x9, 0x6e6bb0, 0x2, 0x1, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d4, 0x2b}, 0xa, @in=@empty, 0x0, 0x3, 0x3, 0x81, 0xffff, 0xd119}}, 0xe8) ioprio_get$uid(0x3, r3) ftruncate(0xffffffffffffffff, 0x6) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000600)=0x4, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x8}}, [0x9, 0x121, 0x4, 0x6, 0x6, 0x6, 0x5, 0xffffffffffffffff, 0x100000000, 0x6, 0x800, 0x2, 0xffff, 0x4e94, 0xe5]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e22, 0xf1, @ipv4={[], [], @empty}, 0x6}}}, 0x84) 09:45:25 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7a, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) write$vhci(r0, &(0x7f0000000900)=@HCI_ACLDATA_PKT={0x2, "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"}, 0x1001) r1 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000), 0x4) [ 1312.794051][ T2193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1312.824594][ T2195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:25 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000ffffff9e}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1313.026453][ T2205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:25 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6381030000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x2, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000000)={{0x1, @addr=0xc6}, "ae945debf440c83d9a2e0308ff16e099dab52f928cae2cb9f94e82426b1dbbab", 0x3}) r1 = socket$inet6(0x10, 0x8080e, 0xfffffffffffffffc) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000380)={"b6ad33fb65f66cafe4e5b01775c59b1406b4eee1e2bece1dfd860247814c4482146b6f0d5de43dcef7e5994d8b42f4d03646e512537e8cea8a26c9ad4bfe6fa914ab66fc2fca43d7bcf4aaa315694ab8db8b48e487af8e1d865bf14b4232bd534fef1ace05dca40e7e7a989e7883aaa71edf198ddec21eb7f6881b07f8c45ead3f675cb1b702430c827d43a0ac4b0621fea149527429456356a5abb4704e321c115ab88a47f832d0257b3f6cc7ae39458fcd33bbd07bf982b4471dd79386364955a11058e0e72709adf80700bc1f4df35160bfb849ba826fe3403d599c7203f7192c08775ca0968ce63dad451d42df844d911c91af1b85dda23a1e00d92a5ae118ea69363b759f629448bccbc1659425b4c59c26e780fbccd2e03365bfe85112fea11a491e0d12c0b872970ae5a9003b34d833fd92abccd8ea9d7fd8796522785feb8e004cbbb074723d1ecb87f95500b6b5481ee4a9c2a3984661700b838eaf9d5853a669a79ad792a641530a1a78c62958eb31d43f478296a7c6c0e24309f8aa2b6298fbb0133fce1e63a3f8698b3c752e3b4642620c7071e46ffe2116e64394c8c361dbaf20f24ba62fefcc5db6422c5989be67f05fd00b5eda80d37e3d83b434a731a6ece7e816626ee05ba6fb607cf5d4788abe52d76fd70a258c163b689f8e9b1de5ef427ac92cba66a76f0b909198f7842029e5417624787b9e0e9aaa877ccd9bc66405f56416d299f03f2625bf34b6ef2051fc227cd4f16a601f5188667c033755eb89fae3b3790d1bef7bdec02a5a1498a0507dde731edea0b15b2d8aca69b4e85a7d0baa7fb37fa81e4605aabffa5c80339fa8b5bf810fd814640caee9b1ae155158a788485dd735a79795638c39366537c5985d95eec3a04e9d8d3299654915110d3f682ff45103d6143f3e8f3db617889a9e6597ccaea167139fe7dc2a6b108539c8641c8785676bcec1cfdcac4a1069cda74d3df172218ab0053246278f9a0cffdd4aa4fd52037d265c63cdc186f4c5a4dd70316967a5ba533bc7d9a68c7acdcbd554b277b67093373909e8e00f472a53992075e02ab4da8b1cea49223f7d52f90abcb6904029d7542a77bb389e17bfe6b93d82ee662027887cc7d08d97d6475aaa1b84d5ad89ae12a3e925354cf2d75a6d3b200d16801ee6940ac8a2b7b42e2c37bb8bb93b217f36a8bea65b19d06d382045c8808daa03005eef13f636d2209633f0718b42756d3a18d24a0f982e101d2b87bbad1cc087b995367ed6574477f77d0af5a0d36ca089d1666596f7f5e1eaf8dde7086eb7264f732acd8f8971c7fc0ddb846253a8f668c95530fa0e14d328d10ec68c9308f61b6c1a228216f2ab40604d8e90fb8d9a50d95d1e77fccee28f95851164df960c76d087c566bd36080472fbd4d462d130f7c969021fe8ee863e3db9c4b099cd56d7cb"}) sendmsg(r1, &(0x7f0000000340)={0x0, 0xffffffffffffff4e, &(0x7f0000000300), 0x1, 0x0, 0x140}, 0x0) 09:45:26 executing program 4: r0 = socket$inet6(0x10, 0x80000, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x100000000805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={r3}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={r3, 0x85, "980f6d9e814b3fb6008c84bb184762143c53fc654808e85f0afa984d58602b16e691160bfab39d4ec8ce6a3a51872e505ed81c693d5b86b7c94a8c0defae19d1f3986279c932049157c75a859eca8b7aef8276791ed47e564487b48fa204d2c156e33c2de91cc3a8dbf17f24333e6ebaf437605cbd9700920203fc54a1e83ba3ba73ae7efd"}, &(0x7f00000000c0)=0x8d) r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r5 = socket$inet(0x2, 0x100000000805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r8 = socket$inet(0x2, 0x100000000805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000240)={r10}, 0x14) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000600)={r10, 0x0, 0x0, 0x200}, 0x51e) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000180)={r7, 0xae, "037f2c366a80fdf386b0d2f8ed629d2c859222b6e6a2c32bf167a5447c696bf5d8067ab51aa01a8c5b2af4c8b728c9f2a8f2aa87c9279c16777ae92e715d6c567451b409f44c02affa8ac0a868693405cd374ccffcab15cb9ae862b8f057b8cdb52e54668327e4d69b66a703bbde264d4b3b31fd087dab157d291d464c74dd6b6237b92bf6d26a6e15a897ea716704044320a85e1a8e5f50c913300102b68a58d8d0214b6c63df7026ba401da276"}, &(0x7f0000000280)=0xb6) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={r11, 0x5, 0x7, 0x40}, 0x10) 09:45:26 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x3e, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:26 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f0810e9f2678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1, 0x0, 0xfffffffffffffff3}, 0x4006) 09:45:26 executing program 3: socket$unix(0x1, 0x5, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x40000, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffe3f) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) socketpair(0x3, 0x1, 0x9, &(0x7f0000000200)) r2 = getpgrp(0x0) setpriority(0x0, r2, 0xffff) stat(&(0x7f00000006c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000700)) stat(&(0x7f0000000780)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000007c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000840)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@remote, @in=@remote, 0x4e20, 0x5, 0x4e22, 0xfffffffffffffffa, 0xa, 0xa0, 0x20, 0xca, 0x0, r3}, {0x80000001, 0x3f, 0x100000000, 0x917a, 0x0, 0x100, 0x8, 0x1000}, {0x8, 0x0, 0x8, 0x101}, 0x9, 0x6e6bb0, 0x2, 0x1, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x0, 0x3, 0x3, 0x81, 0xffff, 0xd119}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, 0x0, 0x0, r5) r6 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffffd4}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) preadv(r7, &(0x7f00000017c0), 0x1b4, 0x500000000000000) perf_event_open$cgroup(&(0x7f0000001900)={0x3, 0x70, 0x7, 0x9, 0xe8, 0x100000000, 0x0, 0x0, 0x21a9, 0x1e, 0x1, 0x1ff, 0x1, 0x3, 0x11d, 0x1f, 0x4, 0x5, 0x3ff, 0x7f, 0x9, 0x7, 0x5, 0x1000, 0x83, 0x3, 0x60a5, 0x3ff, 0x2, 0x1, 0x9, 0x1, 0x2, 0x7, 0x2, 0x1e7, 0x40, 0x3, 0x0, 0x3, 0xb, @perf_config_ext={0x27, 0x4}, 0x10a, 0x86c, 0x5, 0x9, 0x3026, 0x39, 0x8}, r7, 0x4, 0xffffffffffffffff, 0x6) r8 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) accept4$packet(r1, &(0x7f0000001980), &(0x7f00000019c0)=0x14, 0x800) socket$netlink(0x10, 0x3, 0x9) r9 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x3f4) r10 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/840]}, 0x3c0) [ 1313.984017][ T2225] validate_nla: 11 callbacks suppressed [ 1313.984041][ T2225] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:26 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:26 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1314.271681][ T2270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1314.354643][ T2201] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:27 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x27c, 0x0, 0x363, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000018589000000010000003338fb0b0a77e82ff629a893ec11e15a78d5bfbff6eac35e75fea03c753c4ecf817c5016bb975eaf083c6e8ad170d850e84747629886c19e9ab601000000f1e277af430f96d1c9b87b71a8014a8ba057f784d9a857a1bb", @ANYRES32=r0, @ANYRES64=r1], 0x1c, 0x20000000}, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:27 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0xf0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) [ 1314.495332][ T2244] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:27 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000ffffffe4}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1314.704649][ T2229] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:27 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6481030000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:27 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x0) 09:45:27 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) r2 = socket$unix(0x1, 0x5, 0x0) r3 = accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e) connect(r0, &(0x7f00000001c0)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x80) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r2], 0x1c}, 0x0) fstat(r3, &(0x7f0000000140)) close(r0) r4 = socket$unix(0x1, 0x5, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1314.881839][ T2260] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:27 executing program 4: r0 = socket$inet6(0x10, 0x1200000000001, 0x3) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1315.027779][ T2301] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1315.045484][ T2301] CPU: 1 PID: 2301 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 1315.052964][ T2301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.063119][ T2301] Call Trace: [ 1315.063138][ T2301] dump_stack+0x172/0x1f0 [ 1315.063155][ T2301] dump_header+0x10b/0x82d [ 1315.063165][ T2301] ? oom_kill_process+0x94/0x3f0 [ 1315.063178][ T2301] oom_kill_process.cold+0x10/0x15 [ 1315.063192][ T2301] out_of_memory+0x79a/0x12c0 [ 1315.063203][ T2301] ? lock_downgrade+0x920/0x920 [ 1315.063220][ T2301] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1315.063237][ T2301] ? oom_killer_disable+0x280/0x280 [ 1315.106506][ T2301] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1315.112060][ T2301] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1315.117691][ T2301] ? do_raw_spin_unlock+0x57/0x270 [ 1315.117707][ T2301] ? _raw_spin_unlock+0x2d/0x50 [ 1315.117725][ T2301] try_charge+0xf4b/0x1440 [ 1315.132049][ T2301] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1315.137617][ T2301] ? percpu_ref_tryget_live+0x111/0x290 [ 1315.143347][ T2301] ? get_mem_cgroup_from_mm+0x16/0x320 [ 1315.149071][ T2301] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1315.154716][ T2301] mem_cgroup_try_charge+0x136/0x590 [ 1315.159998][ T2301] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1315.160018][ T2301] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1315.160035][ T2301] wp_page_copy+0x41e/0x15e0 [ 1315.160053][ T2301] ? debug_smp_processor_id+0x3c/0x214 [ 1315.171890][ T2301] ? pmd_pfn+0x1d0/0x1d0 [ 1315.171905][ T2301] ? lock_downgrade+0x920/0x920 [ 1315.171919][ T2301] ? vm_normal_page+0x15d/0x3c0 [ 1315.171933][ T2301] ? __pte_alloc_kernel+0x210/0x210 [ 1315.171951][ T2301] ? __kasan_check_read+0x11/0x20 [ 1315.181960][ T2301] ? do_raw_spin_unlock+0x57/0x270 [ 1315.181979][ T2301] do_wp_page+0x499/0x14d0 [ 1315.181992][ T2301] ? do_raw_spin_lock+0x12a/0x2e0 [ 1315.182005][ T2301] ? rwlock_bug.part.0+0x90/0x90 [ 1315.182024][ T2301] ? finish_mkwrite_fault+0x570/0x570 [ 1315.201106][ T2301] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1315.201127][ T2301] __handle_mm_fault+0x22f1/0x3f20 [ 1315.201146][ T2301] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1315.215651][ T2301] ? __kasan_check_read+0x11/0x20 [ 1315.215678][ T2301] ? trace_hardirqs_on+0x67/0x240 [ 1315.215698][ T2301] handle_mm_fault+0x1b5/0x6b0 [ 1315.215723][ T2301] __do_page_fault+0x536/0xdd0 [ 1315.257294][ T2301] do_page_fault+0x38/0x590 [ 1315.257314][ T2301] page_fault+0x39/0x40 [ 1315.257331][ T2301] RIP: 0033:0x40ea88 [ 1315.271305][ T2301] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf ce ee 4b 00 31 c0 e8 a3 32 ff ff 31 ff e8 ec 2e ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d de 19 66 00 [ 1315.271313][ T2301] RSP: 002b:0000000000a6fb30 EFLAGS: 00010246 [ 1315.271325][ T2301] RAX: 0000000094b98124 RBX: 00000000d7f49610 RCX: 0000001b2e420000 [ 1315.271334][ T2301] RDX: 0000000000000000 RSI: 0000000000000124 RDI: ffffffff94b98124 [ 1315.271347][ T2301] RBP: 0000000000000003 R08: 0000000094b98124 R09: 0000000094b98128 [ 1315.271361][ T2301] R10: 0000000000a6fcd0 R11: 0000000000000246 R12: 000000000075bfa8 [ 1315.279368][ T2301] R13: 0000000080000000 R14: 00007f1c04db2008 R15: 0000000000000003 [ 1315.328791][ T2301] memory: usage 307200kB, limit 307200kB, failcnt 88 [ 1315.352943][ T2301] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1315.369875][ T2286] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1315.377512][ T2301] Memory cgroup stats for /syz2: [ 1315.377622][ T2301] anon 170356736 [ 1315.377622][ T2301] file 126976 [ 1315.377622][ T2301] kernel_stack 3801088 [ 1315.377622][ T2301] slab 122925056 [ 1315.377622][ T2301] sock 4096 [ 1315.377622][ T2301] shmem 0 [ 1315.377622][ T2301] file_mapped 0 [ 1315.377622][ T2301] file_dirty 0 [ 1315.377622][ T2301] file_writeback 0 [ 1315.377622][ T2301] anon_thp 157286400 [ 1315.377622][ T2301] inactive_anon 0 [ 1315.377622][ T2301] active_anon 170422272 [ 1315.377622][ T2301] inactive_file 135168 [ 1315.377622][ T2301] active_file 0 [ 1315.377622][ T2301] unevictable 0 [ 1315.377622][ T2301] slab_reclaimable 115433472 [ 1315.377622][ T2301] slab_unreclaimable 7491584 [ 1315.377622][ T2301] pgfault 83193 [ 1315.377622][ T2301] pgmajfault 66 [ 1315.377622][ T2301] workingset_refault 0 [ 1315.377622][ T2301] workingset_activate 0 [ 1315.377622][ T2301] workingset_nodereclaim 0 [ 1315.377622][ T2301] pgrefill 0 [ 1315.377622][ T2301] pgscan 33 [ 1315.377622][ T2301] pgsteal 0 [ 1315.377622][ T2301] pgactivate 0 [ 1315.478417][ T2301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14093,uid=0 [ 1315.494191][ T2301] Memory cgroup out of memory: Killed process 14093 (syz-executor.2) total-vm:72840kB, anon-rss:4268kB, file-rss:35840kB, shmem-rss:0kB [ 1315.635753][ T2291] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1315.763693][ T2266] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:28 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x48, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:28 executing program 4: r0 = socket$inet6(0x10, 0x16a97695fad695b7, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x89, 0x20200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r3 = mmap$binder(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x30, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r3}, @increfs_done={0x40106308, 0x3}, @acquire={0x40046305, 0x2}, @release={0x40046306, 0x1}], 0x91, 0x0, &(0x7f0000000180)="595ca7c610ffc48285a50bbb57348d37628a2456405f51f171fb2d5662f00f87412795230abfb9a0fc2f167165cbaee09c6d9c3358a32d054bd907489b5c249b74df365048098136512409dd09c4325808851cb69c725736bd96603096eab316b23f6fc2a167caf3adfcd163d0ab67aaa2346f430f10d05ab305694f9c51a3fbdf44e138d1a9384f1a6d63addd14f8bcd1"}) 09:45:28 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x60, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) [ 1315.886967][ T2288] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:28 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1316.080964][ T2328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1316.092177][ T2332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:28 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x10a6}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x4, 0x5, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x9, 0x42441) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000d40)={0x2, 0x0, 0x2080, {0x6, 0xf000, 0x1}, [], "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", "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"}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x10000, 0x0) r5 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000700)=@nat={'nat\x00', 0x19, 0x2, 0x4, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r5]}, 0x7c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r6, 0x3, 0x10001}, 0x8) r7 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f0000000100)=0x8, 0x8) r8 = socket$bt_rfcomm(0x1f, 0xc7ca3433485474d8, 0x3) getsockopt$bt_hci(r8, 0x0, 0x0, &(0x7f0000000140)=""/134, &(0x7f0000000200)=0x86) [ 1316.132719][ T2306] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:28 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x300, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:29 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x100000000805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={r3}, 0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x1f}, &(0x7f0000000080)=0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @local, 0x3}, 0x1c) [ 1316.400101][ T2355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1316.421415][ T2355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:29 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000fffffff0}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:29 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6800000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:29 executing program 4: pipe2(&(0x7f0000000000), 0x400) r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1316.933283][ T2367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:29 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0xfffffffffffffffc) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3b2) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x10000082}, 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0xa04000, 0x0) 09:45:29 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES64=r2], 0x1c}, 0x0) close(r1) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 09:45:30 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x4c, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:30 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000000)=@ipx={0x4, 0x8, 0x2000000000, "a93c863b7b10", 0x10001}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)="7d1821fa64be72eb609e162608dfd9040b657f869b63eea70b35afe47f478b355a02ad4b48b6a0b78cff791434f468798f3affc7a68cb1aac2329c4a331ba3751f91b6e3ced30ded50d8c2b271dc0ff543f21938f448471182df6dd38908afa8c1ac781c447658877651b930bb35", 0x6e}, {&(0x7f0000000180)="2c7fb64733183bb4463f8b5f508c41cdb87532f0147cfcde5f72e85ff58845eeb7de27c32cb4f42c176cc58c4722db4f9b9706707775694312a4cffe2ae9b9c3d01220ebb5ecb3c58c0970064dbe3c8ba4d647fa903390241e59d831b72d4757ea7beeb24bd210d0039f32c61c4126a07f33cc696086f93b89d8f56b129df41d05e1ec3a84138e9ae5e593ccc28db4b231147b5faf7f9e11daae66781082bafdd951a54d9b0a726e0bffc8df3b8ad354cead3c00042d39bb98a59ccbd2526610", 0xc0}, {&(0x7f0000000240)="6f9b1f0c5d39829783df41ddd3af18668d162c6df1308b04c4d938db53a100377ffda7258c00e008f72bdfab2d580a03eb6770a1ae28a0fc5df7291d3ba038eef6691294025895191f0291df78bf378f3547e59479356f39e3514f4d745214238740dfbf6c6d209c508f75bad65e87c319584a0a350b1aa336faf85815f638c98a7c8171f4820620cf7dba5f2faea2de2543c58c9cd6b98122b37f23c308e8ef70d153da1b", 0xa5}, {&(0x7f0000000380)="6529685ecbd07c608e2e921f2ebbe032a06f17134b31d42bf3411fff29b9f62c4d1aaaa2c39dbdd6223277e250080fffc84440ddd4f465370f4e4b9c72c05be96bd1c4b0dc4c80c36e170a34aea504a189c4", 0x52}, {&(0x7f0000000400)="927f0b6568e5a5aec0a35bd1eb221a2c1cbfae2250d2d98a24ade7ecf4897e630f2b283337b9e4133579b7af1747b6f3749c65f5f2e807c3a327e8e8d12feb11acde", 0x42}], 0x5}, 0xc000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000580)=0x200000, 0x4) 09:45:30 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES64=r2], 0x1c}, 0x0) close(r1) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1317.992342][ T2393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1318.013010][ T2393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:30 executing program 4: r0 = socket$inet6(0x10, 0xa, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x10001, 0x2, 0x1, 0xc, 0x8, 0x7}, 0x20) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000040)="d24429367a4ac70798c6164adf51ca051f6e31a4b7", 0x15) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:30 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x0) 09:45:31 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x500, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1318.481178][ T2419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1318.497473][ T2425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:31 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)=""/207, &(0x7f0000000180)=0xcf) sendmsg(r0, &(0x7f0000000340)={0x0, 0xfffffd5d, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x8004000) [ 1318.673856][ T2429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1318.692175][ T2430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:31 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6c00000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:31 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000fffffffd}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:31 executing program 4: r0 = socket(0x1de3dea2ca5618f9, 0x6, 0xffffffeffffffff9) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x3cd) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000040)={'ip6gretap0\x00', @ifru_settings={0x7ff, 0x7fffffff, @fr=&(0x7f0000000000)={0x6, 0xf0, 0x6, 0x0, 0x3, 0x1, 0x1}}}) r1 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), 0x2}, 0x0) 09:45:31 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES64=r2], 0x1c}, 0x0) close(r1) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1319.098830][ T2422] validate_nla: 12 callbacks suppressed [ 1319.098851][ T2422] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1319.302793][ T2398] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:32 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x60, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x20) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000080)='selinux+self\x00', &(0x7f00000000c0)="5e6a763754b3c314a7658fd755e3f105d85c89d416ab834a4802a7f68f3a81a794e087823636c0c7e5be14b2", 0x2c) r2 = pkey_alloc(0x0, 0x1) pkey_free(r2) pkey_free(r2) [ 1319.436659][ T2436] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:32 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r1) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2) [ 1319.608346][ T2463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1319.623037][ T2463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:32 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1, 0x0, 0x332}, 0x0) 09:45:32 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x300, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) r2 = getpid() r3 = getpgrp(r2) getpgid(r3) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r3) r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) bind$rds(r4, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x300, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) r6 = getpid() r7 = getpgrp(r6) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r8, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$TIOCMSET(r8, 0x5418, &(0x7f00000001c0)=0xff) getpgid(r7) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000000c0)=r7) sched_getscheduler(r7) r9 = syz_open_procfs(r3, &(0x7f0000000000)='net/ip6_tables_targets\x00') ioctl$VIDIOC_ENUMINPUT(r9, 0xc050561a, &(0x7f0000000040)={0x1, "611fd7f1da24c0fcc9fdea401797ea1436393ee0d65a8ba41465bc2dafe3792d", 0xa65157eadd63233b, 0x1ce4, 0x1, 0x8400a0, 0x0, 0x2}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1319.726578][ T2442] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1319.867719][ T2477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1319.933522][ T2480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1319.979247][ T2423] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:32 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x600, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:32 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES64=r2], 0x1c}, 0x0) close(r1) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 09:45:32 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1004c084}, 0x40) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1320.102466][ T2458] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1320.340883][ T2496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1320.387299][ T2464] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1320.518885][ T2445] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:33 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x7400000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:33 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x1000000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1320.685161][ T2492] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:33 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES64=r2], 0x1c}, 0x0) close(r1) socket$unix(0x1, 0x5, 0x0) [ 1320.995999][ T2507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1321.078580][ T2460] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:33 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x68, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:34 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x401, 0x104000) 09:45:34 executing program 4: socket$inet6(0x10, 0x1200000000003, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7fffffff, 0x2, 0x9, 0xff, 0x0, 0x80, 0x40, 0x8, 0x1, 0x5, 0x7ff, 0xab, 0xf617, 0x0, 0xfffffffffffffc00, 0xffff, 0x4, 0x8, 0xc3, 0xfff, 0x9fd3, 0x3, 0x7, 0xfa0, 0xffffffffffff92fb, 0x4, 0x6, 0x9, 0xa84, 0x3ff, 0x3f, 0x2, 0x1, 0x0, 0x40, 0x6, 0x0, 0x3, 0xd, @perf_bp, 0x12201, 0xfffffffffffffffe, 0xa212, 0x5, 0x5b2, 0x7, 0x39c}, r1, 0xc, r2, 0xa) r3 = socket$key(0xf, 0x3, 0x2) sendmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b1673200db1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1321.578749][ T2524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1321.592965][ T2524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:34 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:34 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES64=r2], 0x1c}, 0x0) close(r1) 09:45:34 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x1900000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1321.981800][ T2539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1322.002178][ T2554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:34 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x700, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:34 executing program 4: socket$inet6(0xa, 0x23194b4f181bc7b1, 0x8) r0 = socket$inet6(0x10, 0xa, 0x42000) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000000)) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:34 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = gettid() r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f00000000c0)={r5, r6, 0x354}) r7 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) bind$netlink(r7, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd}, 0xc) [ 1322.268626][ T2569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1322.458639][ T2569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:35 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x7a00000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:35 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1, 0x10) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000180)=""/191, 0xbf}, &(0x7f0000000240), 0x5}, 0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5, 0xfff}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x180}, 0x8) [ 1322.651305][ T2595] sctp: [Deprecated]: syz-executor.4 (pid 2595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1322.651305][ T2595] Use struct sctp_sack_info instead 09:45:35 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES64=r2], 0x1c}, 0x0) [ 1322.853329][ T2591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1322.866794][ T2595] sctp: [Deprecated]: syz-executor.4 (pid 2595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1322.866794][ T2595] Use struct sctp_sack_info instead [ 1322.888262][ T2591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:35 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6c, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:35 executing program 4: socket$inet6(0x10, 0x1200000000003, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/mnt\x00') fsetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000100)='nat\x00', 0x4, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r3 = accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x800) sendmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x0) 09:45:35 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'caif0\x00', 0x400}) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x40, 0x208000) ioctl(r2, 0xea8, &(0x7f0000000040)="18ed942c8d68a9acf443360bd21ba32eae0dcc264d02b1815560f5544f6679f013f35fb30b59c68307d46053526afb3b6ac9264acf7d83be99694e4945399ef372c9b4dce43bb324acb0") r3 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000240)={0x0, 0x7fffffff}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000200)={r4, 0x2}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:36 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000180)={0x43, 0x9, 0x2, {0x8, 0x371, 0x9, 0x9, 0x5, 0x4, 0xfffffffffffff800, 0x80000001, 0x1}}, 0x43) r1 = socket$inet6(0x10, 0x1200000000003, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x8a33, 0x4) r2 = fanotify_init(0x32, 0x800) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x300, 0x0) fanotify_mark(r2, 0x40, 0xc0000001, r3, &(0x7f0000000080)='./file0\x00') sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1323.296125][ T2622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1323.328229][ T2623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:36 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0xa00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) [ 1323.524387][ T2626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:36 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x4000000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:36 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x5, 0x240000000, 0x1f}) 09:45:36 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 09:45:36 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="be6b30a1c436f16ad93330aa2dc9ff9b8bd369086d38c0150f4bbf6d39172b1d4b77d06efcdf0c6a2f12ad18660a7ea73bd6a7cfc468c2f9655ed6351af759aaba534ff3531ed14b7b74883dd27d8e3154d4dca2", 0x54) [ 1324.007632][ T2638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1324.020606][ T2647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1324.101894][ T2653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1324.199291][ T2653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1324.277588][ T2630] validate_nla: 12 callbacks suppressed [ 1324.277597][ T2630] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:37 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x97ffffff00000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:37 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x21}], 0x1, 0x0, 0xfffffffffffffd7a}, 0x0) 09:45:37 executing program 4: socket$inet6(0x10, 0x5, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000000)=0x3) r2 = socket(0xa, 0x5, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x10001, 0x0, 0x10000, 0x20}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x1, r3}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r4 = socket$inet(0x2, 0x100000000805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r6, @rand_addr=0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000240)={r7}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={r7, 0x2}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00"/840]}, 0x3c0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1324.511477][ T2648] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1324.760968][ T2618] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:37 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x74, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:37 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:37 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) socket$unix(0x1, 0x5, 0x0) [ 1324.887447][ T2631] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1325.041373][ T2678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:37 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = socket$inet_sctp(0x2, 0x69ccdc59e47f35ab, 0x84) prctl$PR_SET_PDEATHSIG(0x1, 0x7) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1325.103175][ T2688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1325.104762][ T2662] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:37 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0xe00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) [ 1325.303519][ T2698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1325.319773][ T2701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1325.382859][ T2671] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:38 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x5b00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:38 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1325.535340][ T2682] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1325.577347][ T2704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:38 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r1 = socket(0xa, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000155b0ee851de54910000", @ANYRES16=r3, @ANYBLOB="010000000000000000000300000058000100100001007564703a73797a300000000044000400200001002500000000000000ff01000000000000000000000000000100000000200002000a00000000000000ff01000000000000000000000000000100000000"], 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9138101}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)={0x1b4, r3, 0x22, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @ipv4={[], [], @remote}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffffff7b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x284d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x1}, 0x44008c85) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') epoll_wait(r4, &(0x7f00000004c0)=[{}, {}], 0x2, 0x8ec) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="3301ed00", @ANYRES16=r5, @ANYBLOB="00012bbd7000fddbdf250e000000000002000000030032780000befc030044000200080008000900000008000d000100000008000500ffffff7f00000700018000000800020000010000080008000180000032fd09000000008000000e004e2000005b030500ff000000080005000100000708000400ff0300000400030040000100080009002c000000080001000200000008000800a10e0000080008000300000000000200000000000c0007000300000000000000080009004b000000"], 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x8810) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6102}, 0xc, &(0x7f0000000040)={&(0x7f0000000700)={0xc8, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6ac8edb9}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xb}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x6}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xcae}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb6d}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r6 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:38 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) [ 1325.861457][ T2727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1325.911102][ T2697] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1326.097749][ T2667] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:38 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x9effffff00000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1326.238096][ T2711] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:39 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 1326.719368][ T2740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:39 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x7a, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:39 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0xf47, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:40 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xffffffff00000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:40 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x246, &(0x7f0000000300)=[{&(0x7f0000000540)="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", 0x490}], 0x1}, 0x88000) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000740)='/proc/capi/capi20\x00', 0x781402, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x16c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x80010) 09:45:40 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) socket$unix(0x1, 0x5, 0x0) 09:45:40 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xe4ffffff00000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:41 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) 09:45:41 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:41 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x1261, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:41 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x2}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:41 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3be) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x1, 0x18e, [0x0, 0x20000600, 0x20000630, 0x20000660], 0x0, &(0x7f0000000080), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0x6}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x0, 0x40, 0x884c, 'hwsim0\x00', 'syz_tun\x00', 'nr0\x00', 'bond_slave_0\x00', @empty, [0xff, 0x0, 0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0x0, 0x7f, 0xff], 0x6e, 0xce, 0xfe, [], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}], @common=@STANDARD={'\x00', 0x8}}]}]}, 0x206) ioctl$sock_proto_private(r0, 0x89ed, &(0x7f0000000000)="43f855422a7741c344e2b77d491ff96d96e31daa4852e6d7abb61645ba9265e565bda5de434b976db52bb42523d99df1cd8cdfa6e4e6b65cf1f56396843e4d7ea2b96d80b884d9467eef2732c4606e66a4dd9ec01972a614d09ffcea86fe252cf4767b2e") r1 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:41 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) 09:45:42 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0xffffffffffffffdc}], 0x1, 0x0, 0x1ab}, 0x30) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x400) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0x46d, 0x4) [ 1329.450301][ T2813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:42 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xb0, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xfffffffffffffd41, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x88}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x18}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x22}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xdade43418e54b44f}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nlmon0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xb0}}, 0xc854) [ 1329.517947][ T2802] validate_nla: 13 callbacks suppressed [ 1329.517970][ T2802] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1329.667532][ T2827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1329.715884][ T2782] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:42 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf0ffffff00000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1329.836498][ T2810] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:42 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) [ 1330.093011][ T2799] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:42 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) 09:45:42 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) 09:45:42 executing program 3: r0 = socket(0x0, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) [ 1330.331573][ T2803] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:43 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x300, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1330.487940][ T2827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:43 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x1f00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) [ 1330.574882][ T2833] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1330.797479][ T2814] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:43 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x3}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:43 executing program 3: r0 = socket(0x0, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) [ 1330.934283][ T2859] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:43 executing program 4: socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x233, &(0x7f0000000600)=[{&(0x7f0000000480)="8fa1e44f45687556df92fbfa0ce8afc33d46315d94c86cc2dfa34390915cd1df6da2139ecca21ebb800e07ec8aa1eada4fec2b312655e9397d7bbe73518e0f665d43"}, {&(0x7f0000000500)="8337986f0c141e6ea2d13d58d15d20ea76baaab999acd01cd36dc5984c902bbd3797df53d8a704d52dccdc6f90b648afc8482949ee15de983f4d83fba6081f23dfbe3b18116648b6b4004802bde11cfef1099d750221149143e4b2d5c0349c2c54b0d5ae97e95205e50449124a451d70aadc74b407048e2759d40ced64881bb8f3aa360e46e8e38a4c26095aee75e01fe905af8f380b3d9f32e1a6a3f181ea05eebdc1679ae95bf74743d86167f66ecea231f19e4d63a7df3e9a0cf53f65000e1c1d5f"}], 0x1a7, 0x0, 0x8d}, 0x20008400) 09:45:43 executing program 3: r0 = socket(0x0, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) 09:45:43 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) acct(0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') epoll_wait(r2, &(0x7f00000004c0)=[{}, {}], 0x2, 0x8ec) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="00012bbd7000fddbdf250e000000000002000000030032780000befc030044000200080008000900000008000d000100000008000500ffffff7f00000700018000000800020000010000080008000180000032fd09000000008000000e004e2000005b030500ff000000080005000100000708000400ff0300000400030040000100080009002c000000080001000200000008000800a10e0000080008000300000000000200000000000c0007000300000000000000080009004b000000"], 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x8810) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000600)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000000}, 0x10048000) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100000000, 0x200) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x238221ec, 0x20, 0x100, 0x0, 0x5, 0x80000001, 0xe0c, 0x0, 0x3f, 0xfffffffffffffeff, 0x1, 0x7fffffff, 0x0, 0x8c, 0x2, 0x8, 0x1ff, 0x2, 0x1ff}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@remote, @multicast2, 0x0, 0x1, [@remote]}, 0x14) [ 1331.383209][ T2886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1331.435116][ T2863] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1331.560899][ T2834] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:44 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf103000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:44 executing program 3: r0 = socket(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) 09:45:44 executing program 3: r0 = socket(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) 09:45:44 executing program 3: r0 = socket(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) 09:45:44 executing program 3: socket(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) [ 1332.009319][ T2888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:44 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x500, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:45 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x2000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:45 executing program 3: socket(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) 09:45:45 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r2 = socket$inet(0x2, 0xa, 0xe912) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup(r1) r5 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r6 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x100, @empty, 0x100}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000006c0)={r7, @in={{0x2, 0x4e20, @multicast2}}}, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r8}, 0x14) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={r8, @in6={{0xa, 0x4e23, 0x0, @empty, 0x81}}}, 0x84) 09:45:45 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x4}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:45 executing program 3: socket(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x2029}, 0x1c) 09:45:45 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) [ 1333.220185][ T2937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1333.290695][ T2937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:46 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xfdffffff00000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:46 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) 09:45:46 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) 09:45:46 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) 09:45:46 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback, 0x2029}, 0x1c) [ 1333.860290][ T2973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:46 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x600, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:46 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x3e00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:46 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)=""/4096) 09:45:47 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x2) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1334.491319][ T2997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1334.558545][ T2984] validate_nla: 12 callbacks suppressed [ 1334.558578][ T2984] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:47 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x5}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:47 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2029}, 0x1c) 09:45:47 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1334.760084][ T2991] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1335.092797][ T2994] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1335.211220][ T2980] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:48 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xffffff7f00000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:48 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000000)) [ 1335.333177][ T3019] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1335.377898][ T3030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1335.389513][ T3030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:48 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x48c) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) write$UHID_INPUT(r3, &(0x7f0000000d40)={0x8, "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", 0x1000}, 0x1006) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), 0x3b8}, 0x0) 09:45:48 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x20) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x2, 0x100) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, 0x0, 0x0, r5) fchownat(r1, &(0x7f0000000180)='./file0\x00', r3, r5, 0x1000) r6 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f00000001c0)={0xf0f045, 0x0, [], @ptr}}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") ppoll(&(0x7f00000000c0)=[{r6, 0x836e}], 0x20000000000000d8, 0x0, 0x0, 0xfffffffffffffd6a) r8 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r8) r9 = add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="a6c2864b972a6a1c43aea860afb2d295cb962cdc66e203bd7d221d6bb6c394c6fa3b2ef89409696e99d855e88801fae8", 0x30, r8) r10 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r10) keyctl$instantiate(0xc, r9, &(0x7f0000000680)=@encrypted_update={'update ', 'default', 0x20, 'user:', '-cgroupcgroup/[(GPL'}, 0x28, r10) sendmsg(r0, &(0x7f0000000340)={0x0, 0xfff1, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005000900000008000500140f081001f3678b80142314e9030b975668a5b167320b9b1104b1df13000000fb0000000000000000", 0x55}], 0x1144, 0x0, 0xfffffffffffffccb}, 0x0) 09:45:48 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2029}, 0x1c) [ 1335.821094][ T2992] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:48 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x700, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1335.951786][ T2998] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:48 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x3f00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x44f) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/125, 0x53}], 0x1, 0x500000000000000) mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x18e) r2 = socket$inet6(0x10, 0x1200000000003, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) sendmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x371}], 0x1, 0x0, 0x15c}, 0x0) [ 1336.106948][ T3034] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:48 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="5500000018007f7005fe01b2a4a270930a601480fea8430293040000390009002200050014000000080005b92bd09f081001f3678b805fd58192030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0xfffffffffffffe74}], 0x1}, 0x0) [ 1336.369787][ T3046] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1336.513798][ T3058] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:45:49 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x6}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:49 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0xd2d0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x42e}], 0x1}, 0x0) 09:45:49 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2029}, 0x1c) 09:45:49 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xffffffff00000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:49 executing program 4: socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="cc697cca005be82ae9a22f7026deaf3f5801343387677ff1a1b6d10393bb3feeb3dd6e27f6b5c88aee528a7976fc1583cbd71c2ba1dfffe5e5b8984a3d5d3153c2d3a75403a80303c50391ad814c1c0ffdf278397a8c37951c011cbea1a1a2df29d641829d1ef7ec1f7b9f585a80a276bb21bc159aff9127af11c76235340d5b95c8d8a64dc26fc719d8b8eba980ea1d3780f5a30db2ef00cd7a0291152d972a3e22f01918a4fb78b29fde3c0064483e1794d39ce1ec165bbff4acb09135c0", 0xbf}, {&(0x7f0000000240)="99c5653424845f9db99ac1f415aedb878c8d0824c5f5f940651ce908e8beb42be2045e798ae6260dd44f5cf10171ce1ae19ec4bf70619e36cc2351c57258d5e559d140f543c464e4fef114206840c7aaa5af6e06d0a38702cfef8a1818aa92279d70645fe165519d3b4f8166d1c5805abd4019b23a8d3642a30a5dd285a149ea32e68c9c8b6d0bde5bbb93e015df07731f1849f02fc472ab04ee86fbda224556830cc7901d0d13b9143598", 0xab}], 0x2}, 0x0) r0 = semget(0x1, 0x2, 0xc2) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000000)=""/6) bind$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10) 09:45:50 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="8458af6bcd07728c02d9479cba89500c19da29aa1683d0d5469b53033a5aab012cc037b80cf7dab826d0178e75535c7539f55ced6c9d1549fe635cdae232976b58c6cd310cd0451f4df9101103e46d77efff36c9b69bd4d840cd5922c1d828423798b31abdd462739fa91374aab54964115d7124d28ce6f615527f48193664ad45be3ff219c90afaf800479c89", 0x8d}, {&(0x7f0000000180)="cd98b7eb27b35fe890fdd3d16c3860ebabe008670872b02d001988843ac6462730115d60276ba5f5e04ebd07375303600180d1483533a63008858a246c6713051320754ba0db509649d3191c567c75672a4a0be4c2fec768bf93f1ed35f08ea0ae28eb1b662a66", 0x67}, {&(0x7f0000000200)="3508346d4b9a42a707cf882c14baef813691ae84cfb337db4e0e323fdbe7c452b95fec78d57d8a4b87aeead026a4201697a48bef21b0d4342200392ed31f8b050b99fd55dc36177046d6c010a3c759f410867f76347c52ede54f375ca5bde3306431c7a295c15ac6e712771e02a73ff4", 0x70}], 0x3, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}, 0x800) 09:45:50 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback}, 0x1c) 09:45:50 executing program 4: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000000c0)={0x158, 0xc00000}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x800, 0x4) r2 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) mq_timedreceive(r3, &(0x7f00000001c0)=""/53, 0x35, 0x3, &(0x7f0000000240)={r4, r5+30000000}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000180)={0x9, 0x4, 0x7}) [ 1337.539522][ T3098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1337.601573][ T3115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1337.627234][ T3120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:50 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xa00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:50 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x4000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:50 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1, 0x500010000000000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) prctl$PR_MCE_KILL_GET(0x22) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x20) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:50 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x7}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1338.169424][ T3128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1338.198464][ T3143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:50 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80, 0x18080) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x3, 0x2, {0xa, 0x4e21, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0xba}}}, 0x3a) r2 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x400000b7]}) 09:45:51 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000300)=""/198, 0xc6}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) tkill(r0, 0x1000000000016) [ 1338.727921][ T3146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:51 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xffffffff87800000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x14, &(0x7f0000002500), &(0x7f0000002540)=0x8) 09:45:51 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1339.310905][ T3176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:52 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0x14, r3, 0x84c712fe4e0d10f5, 0x0, 0x4}, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f310000"], 0x34}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffffd) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8804}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="981e0000", @ANYRES16=r3, @ANYBLOB="000829bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="800002003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000100000000000000000000000000000000000000000000080003000300000008000400ff0300000800060000000000000000", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="3401020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x1d8}, 0x1, 0x0, 0x0, 0x6008914}, 0x40) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:52 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xb26, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1339.613189][ T3142] validate_nla: 12 callbacks suppressed [ 1339.613198][ T3142] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:52 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x8}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1339.725346][ T3188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.897602][ T3188] device bridge_slave_1 left promiscuous mode [ 1339.903842][ T3188] bridge0: port 2(bridge_slave_1) entered disabled state 09:45:52 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x470f, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) [ 1340.058426][ T3209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1340.079817][ T3182] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:52 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80}, 0xe1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80}, 0xe1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) dup2(r1, r2) 09:45:52 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffca5, &(0x7f0000000140)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a2909302060400000000010400090039000b0035000c031600000019000b4023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) 09:45:53 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80}, 0xe1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80}, 0xe1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) [ 1340.299779][ T3226] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1340.310855][ T3195] bridge_slave_1: renamed from veth67 09:45:53 executing program 3 (fault-call:1 fault-nth:0): r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback}, 0x1c) [ 1340.447086][ T3238] FAULT_INJECTION: forcing a failure. [ 1340.447086][ T3238] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.459753][ T3238] CPU: 1 PID: 3238 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 1340.459763][ T3238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.459768][ T3238] Call Trace: [ 1340.459790][ T3238] dump_stack+0x172/0x1f0 [ 1340.459813][ T3238] should_fail.cold+0xa/0x15 [ 1340.459831][ T3238] ? fault_create_debugfs_attr+0x180/0x180 [ 1340.459843][ T3238] ? mark_held_locks+0xf0/0xf0 [ 1340.459855][ T3238] ? lock_downgrade+0x920/0x920 [ 1340.459877][ T3238] __should_failslab+0x121/0x190 [ 1340.459896][ T3238] should_failslab+0x9/0x14 [ 1340.459909][ T3238] kmem_cache_alloc+0x47/0x710 [ 1340.459927][ T3238] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1340.459948][ T3238] sctp_get_port_local+0x44d/0x16c0 [ 1340.459962][ T3238] ? perf_trace_lock_acquire+0xf5/0x530 [ 1340.459982][ T3238] ? sctp_wait_for_connect+0x580/0x580 [ 1340.460001][ T3238] ? sctp_bind_addr_match+0x1e3/0x2d0 09:45:53 executing program 3 (fault-call:1 fault-nth:1): r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback}, 0x1c) [ 1340.477522][ T3238] ? sctp_inet6_bind_verify+0xa8/0x4f0 [ 1340.477542][ T3238] sctp_do_bind+0x20f/0x5e0 [ 1340.477564][ T3238] sctp_autobind+0x168/0x1e0 [ 1340.477584][ T3238] ? aa_profile_af_perm+0x320/0x320 [ 1340.477600][ T3238] ? sctp_do_bind+0x5e0/0x5e0 [ 1340.477621][ T3238] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1340.485200][ T3238] ? __ipv6_addr_type+0x219/0x32d [ 1340.485218][ T3238] ? sctp_endpoint_is_peeled_off+0xf2/0x130 [ 1340.485236][ T3238] __sctp_connect+0x780/0xcd0 [ 1340.485257][ T3238] ? sctp_autobind+0x1e0/0x1e0 [ 1340.485273][ T3238] ? lock_sock_nested+0x9a/0x120 [ 1340.485286][ T3238] ? trace_hardirqs_on+0x67/0x240 [ 1340.485306][ T3238] ? __local_bh_enable_ip+0x15a/0x270 [ 1340.495663][ T3238] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1340.495682][ T3238] sctp_inet_connect+0x14d/0x1c0 [ 1340.495698][ T3238] __sys_connect+0x264/0x330 [ 1340.495713][ T3238] ? __ia32_sys_accept+0xb0/0xb0 [ 1340.495732][ T3238] ? fput+0x1b/0x20 [ 1340.495745][ T3238] ? ksys_write+0x1cf/0x290 [ 1340.495765][ T3238] ? __ia32_sys_read+0xb0/0xb0 [ 1340.505362][ T3238] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1340.505383][ T3238] __x64_sys_connect+0x73/0xb0 [ 1340.505402][ T3238] do_syscall_64+0xfa/0x760 [ 1340.505421][ T3238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1340.505430][ T3238] RIP: 0033:0x4598e9 [ 1340.505445][ T3238] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1340.505452][ T3238] RSP: 002b:00007f38ab93cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1340.505465][ T3238] RAX: ffffffffffffffda RBX: 00007f38ab93cc90 RCX: 00000000004598e9 [ 1340.505481][ T3238] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 1340.514875][ T3238] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1340.514882][ T3238] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38ab93d6d4 [ 1340.514890][ T3238] R13: 00000000004bfe0a R14: 00000000004d1c98 R15: 0000000000000004 [ 1340.658854][ T3248] FAULT_INJECTION: forcing a failure. [ 1340.658854][ T3248] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.673368][ T3248] CPU: 1 PID: 3248 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 1340.700783][ T3248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.700788][ T3248] Call Trace: [ 1340.700806][ T3248] dump_stack+0x172/0x1f0 [ 1340.700827][ T3248] should_fail.cold+0xa/0x15 [ 1340.700845][ T3248] ? fault_create_debugfs_attr+0x180/0x180 [ 1340.700860][ T3248] ? sctp_get_port_local+0xf55/0x16c0 [ 1340.700875][ T3248] ? __local_bh_enable_ip+0x15a/0x270 [ 1340.700900][ T3248] __should_failslab+0x121/0x190 [ 1340.716812][ T3248] should_failslab+0x9/0x14 [ 1340.716828][ T3248] kmem_cache_alloc_trace+0x4b/0x790 [ 1340.716845][ T3248] ? sctp_wait_for_connect+0x580/0x580 [ 1340.716861][ T3248] sctp_add_bind_addr+0x9f/0x3a0 [ 1340.716877][ T3248] sctp_do_bind+0x2fa/0x5e0 [ 1340.716896][ T3248] sctp_autobind+0x168/0x1e0 [ 1340.716909][ T3248] ? aa_profile_af_perm+0x320/0x320 [ 1340.716923][ T3248] ? sctp_do_bind+0x5e0/0x5e0 [ 1340.716936][ T3248] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1340.716955][ T3248] ? __ipv6_addr_type+0x219/0x32d [ 1340.732873][ T3248] ? sctp_endpoint_is_peeled_off+0xf2/0x130 [ 1340.732891][ T3248] __sctp_connect+0x780/0xcd0 [ 1340.732910][ T3248] ? sctp_autobind+0x1e0/0x1e0 [ 1340.732930][ T3248] ? lock_sock_nested+0x9a/0x120 [ 1340.753452][ T3248] ? trace_hardirqs_on+0x67/0x240 [ 1340.770928][ T3248] ? __local_bh_enable_ip+0x15a/0x270 [ 1340.770943][ T3248] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1340.770964][ T3248] sctp_inet_connect+0x14d/0x1c0 [ 1340.778539][ T3248] __sys_connect+0x264/0x330 [ 1340.778555][ T3248] ? __ia32_sys_accept+0xb0/0xb0 [ 1340.778580][ T3248] ? fput+0x1b/0x20 [ 1340.788945][ T3248] ? ksys_write+0x1cf/0x290 [ 1340.788963][ T3248] ? __ia32_sys_read+0xb0/0xb0 [ 1340.788975][ T3248] ? switch_fpu_return+0x1fa/0x4f0 [ 1340.788995][ T3248] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1340.799717][ T3248] __x64_sys_connect+0x73/0xb0 [ 1340.799736][ T3248] do_syscall_64+0xfa/0x760 [ 1340.799757][ T3248] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1340.809258][ T3248] RIP: 0033:0x4598e9 [ 1340.809274][ T3248] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1340.809282][ T3248] RSP: 002b:00007f38ab93cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1340.809296][ T3248] RAX: ffffffffffffffda RBX: 00007f38ab93cc90 RCX: 00000000004598e9 [ 1340.809304][ T3248] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 1340.809319][ T3248] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1340.820023][ T3248] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38ab93d6d4 [ 1340.820030][ T3248] R13: 00000000004bfe0a R14: 00000000004d1c98 R15: 0000000000000004 [ 1341.023905][ T3194] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1341.157824][ T3200] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1341.275595][ T3184] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:45:54 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xfffffffffffff000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:54 executing program 3 (fault-call:1 fault-nth:2): r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback}, 0x1c) [ 1341.391474][ T3220] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1341.437315][ T3252] FAULT_INJECTION: forcing a failure. [ 1341.437315][ T3252] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.462164][ T3252] CPU: 1 PID: 3252 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 1341.469670][ T3252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.479735][ T3252] Call Trace: [ 1341.483047][ T3252] dump_stack+0x172/0x1f0 [ 1341.487397][ T3252] should_fail.cold+0xa/0x15 [ 1341.492002][ T3252] ? fault_create_debugfs_attr+0x180/0x180 [ 1341.497820][ T3252] ? page_to_nid.part.0+0x20/0x20 [ 1341.502855][ T3252] ? ___might_sleep+0x163/0x280 [ 1341.507718][ T3252] __should_failslab+0x121/0x190 [ 1341.512659][ T3252] should_failslab+0x9/0x14 [ 1341.517165][ T3252] kmem_cache_alloc_trace+0x2d3/0x790 [ 1341.522542][ T3252] ? sctp_autobind+0x168/0x1e0 [ 1341.527316][ T3252] ? aa_profile_af_perm+0x320/0x320 [ 1341.532547][ T3252] sctp_association_new+0x93/0x1f80 [ 1341.537755][ T3252] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1341.543648][ T3252] ? sctp_v6_scope+0x5e/0x70 [ 1341.548238][ T3252] __sctp_connect+0x736/0xcd0 [ 1341.548260][ T3252] ? sctp_autobind+0x1e0/0x1e0 [ 1341.548279][ T3252] ? lock_sock_nested+0x9a/0x120 [ 1341.557688][ T3252] ? trace_hardirqs_on+0x67/0x240 [ 1341.557708][ T3252] ? __local_bh_enable_ip+0x15a/0x270 [ 1341.557723][ T3252] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1341.557740][ T3252] sctp_inet_connect+0x14d/0x1c0 [ 1341.557756][ T3252] __sys_connect+0x264/0x330 [ 1341.557775][ T3252] ? __ia32_sys_accept+0xb0/0xb0 [ 1341.567716][ T3252] ? fput+0x1b/0x20 [ 1341.567730][ T3252] ? ksys_write+0x1cf/0x290 [ 1341.567745][ T3252] ? __ia32_sys_read+0xb0/0xb0 [ 1341.567763][ T3252] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1341.567781][ T3252] __x64_sys_connect+0x73/0xb0 [ 1341.567797][ T3252] do_syscall_64+0xfa/0x760 [ 1341.567816][ T3252] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1341.593563][ T3252] RIP: 0033:0x4598e9 09:45:54 executing program 3 (fault-call:1 fault-nth:3): r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback}, 0x1c) [ 1341.593579][ T3252] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1341.593587][ T3252] RSP: 002b:00007f38ab93cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1341.602027][ T3252] RAX: ffffffffffffffda RBX: 00007f38ab93cc90 RCX: 00000000004598e9 [ 1341.602036][ T3252] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 1341.602045][ T3252] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1341.602054][ T3252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38ab93d6d4 [ 1341.602062][ T3252] R13: 00000000004bfe0a R14: 00000000004d1c98 R15: 0000000000000004 [ 1341.723026][ T3261] FAULT_INJECTION: forcing a failure. [ 1341.723026][ T3261] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1341.724203][ T3196] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1341.736256][ T3261] CPU: 0 PID: 3261 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 1341.736266][ T3261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.736271][ T3261] Call Trace: [ 1341.736300][ T3261] dump_stack+0x172/0x1f0 [ 1341.769516][ T3261] should_fail.cold+0xa/0x15 [ 1341.774122][ T3261] ? fault_create_debugfs_attr+0x180/0x180 [ 1341.779928][ T3261] ? perf_trace_lock+0xeb/0x4c0 [ 1341.784782][ T3261] should_fail_alloc_page+0x50/0x60 [ 1341.784796][ T3261] __alloc_pages_nodemask+0x1a1/0x900 [ 1341.784812][ T3261] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1341.784824][ T3261] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1341.784841][ T3261] ? __kasan_check_read+0x11/0x20 [ 1341.801087][ T3261] ? fault_create_debugfs_attr+0x180/0x180 [ 1341.801109][ T3261] cache_grow_begin+0x90/0xd20 [ 1341.822373][ T3261] ? sctp_association_new+0x93/0x1f80 [ 1341.822391][ T3261] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1341.822411][ T3261] kmem_cache_alloc_trace+0x6b3/0x790 [ 1341.839392][ T3261] sctp_association_new+0x93/0x1f80 [ 1341.844746][ T3261] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1341.850640][ T3261] ? sctp_v6_scope+0x5e/0x70 [ 1341.850658][ T3261] __sctp_connect+0x736/0xcd0 [ 1341.850678][ T3261] ? sctp_autobind+0x1e0/0x1e0 [ 1341.864666][ T3261] ? lock_sock_nested+0x9a/0x120 [ 1341.864680][ T3261] ? trace_hardirqs_on+0x67/0x240 [ 1341.864697][ T3261] ? __local_bh_enable_ip+0x15a/0x270 [ 1341.864716][ T3261] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1341.880001][ T3261] sctp_inet_connect+0x14d/0x1c0 [ 1341.880018][ T3261] __sys_connect+0x264/0x330 [ 1341.880035][ T3261] ? __ia32_sys_accept+0xb0/0xb0 [ 1341.890863][ T3261] ? fput+0x1b/0x20 [ 1341.890877][ T3261] ? ksys_write+0x1cf/0x290 [ 1341.890895][ T3261] ? __ia32_sys_read+0xb0/0xb0 [ 1341.900388][ T3261] ? switch_fpu_return+0x1fa/0x4f0 [ 1341.900407][ T3261] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1341.900426][ T3261] __x64_sys_connect+0x73/0xb0 [ 1341.908690][ T3261] do_syscall_64+0xfa/0x760 [ 1341.908710][ T3261] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1341.908726][ T3261] RIP: 0033:0x4598e9 [ 1341.943600][ T3261] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1341.963208][ T3261] RSP: 002b:00007f38ab93cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1341.971619][ T3261] RAX: ffffffffffffffda RBX: 00007f38ab93cc90 RCX: 00000000004598e9 [ 1341.979588][ T3261] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 09:45:54 executing program 4: socket$inet6(0x10, 0x1200000000003, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x3a2, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x261}], 0x27b}, 0x850) [ 1341.987555][ T3261] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1341.995518][ T3261] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38ab93d6d4 [ 1342.003492][ T3261] R13: 00000000004bfe0a R14: 00000000004d1c98 R15: 0000000000000004 [ 1342.113566][ T3239] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:54 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xe00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:55 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xa}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1342.313482][ T3223] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:55 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x4800, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:55 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffdb1}, 0x40021800) 09:45:55 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback}, 0x1c) 09:45:55 executing program 4: arch_prctl$ARCH_GET_CPUID(0x1011) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="64291f5b170ab3db853469e20978a9d83b2c99a9a31c0a70652a3248bfc4460619f3fe3363f239e0035a5551c98d21ef5c07ae92f1b51bcd1023de42abc5526a08bd67aa253d3703caa5645464382f1106e98a7c65aacc02c1cd55704cfa74854aef64eeea141ab0b4bf7b1e1da5e13d758299d1dd205ff55c2cc5b3e9d01b5962349b7ed120726eb2ac7da5de4924b43fd10a899a136b09cf93", 0x9a}], 0x1, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffffffff368}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ra={0x94, 0x6, 0x5}, @cipso={0x86, 0x50, 0x80000000, [{0x984530368a6c3ab1, 0x10, "576dbef41f9ef5b257cbababb972"}, {0x6, 0x11, "1192c30ad4d1a6067f56faf05f47b4"}, {0xe, 0x12, "3ee322ef62d5a0643322d018dee71380"}, {0x4b38dd18a96a9551, 0x8, "abaf50e1873d"}, {0x5, 0x5, "59f2a7"}, {0x5, 0x3, "95"}, {0x5, 0x7, "c5ff586eb8"}]}, @cipso={0x86, 0xd, 0x7, [{0x7, 0x7, "697878984a"}]}, @ssrr={0x89, 0x13, 0x9, [@local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}], 0xb8}, 0x1) r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:55 executing program 4: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1342.705341][ T3302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1342.778634][ T3307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:55 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x1) [ 1343.048006][ T3308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:56 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000002, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:56 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:56 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet6(0x10, 0x746ace18e139479d, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1343.369578][ T3319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:56 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) socket$inet6(0xa, 0xa, 0x40) [ 1343.489682][ T3334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1343.640325][ T3334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:56 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf47, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:56 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xe}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:56 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x4c00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:56 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x3, @loopback}, 0x1c) 09:45:56 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0x3, 0x1f, &(0x7f0000000040)=0x1}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:57 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xf8, 0x100) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000080)={0x6f5, 0x1000}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)=0xffffffffffffffff) [ 1344.511894][ T3360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1344.532193][ T3372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:57 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) fsync(r1) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) [ 1344.641588][ T3375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1344.654622][ T3375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1344.762085][ T3351] validate_nla: 10 callbacks suppressed [ 1344.762105][ T3351] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1344.786820][ T3384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:57 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/840]}, 0x3c0) r2 = dup3(r1, 0xffffffffffffffff, 0x100000) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) [ 1344.805557][ T3385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1344.962449][ T3392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1344.977191][ T3392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1345.051088][ T3324] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1345.069060][ T3366] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:57 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000003, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:57 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0xdf46be8915263e2a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = socket$inet6(0x10, 0x4, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:45:57 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x3, 0x0, 0x3, @loopback}, 0x1c) 09:45:57 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x4, 0x0, 0x3, @loopback}, 0x1c) [ 1345.468892][ T3348] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1345.669675][ T3386] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:58 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x1f00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1345.972537][ T3371] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:45:58 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x10}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:45:58 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x6000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:45:58 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x447, 0x20100) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0xff, 0x5c8}) r2 = socket(0xa, 0x5, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) recvmmsg(r3, &(0x7f0000004100)=[{{&(0x7f0000000600)=@caif, 0x80, &(0x7f0000000680)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x7}, {{&(0x7f00000006c0)=@nfc_llcp, 0x80, &(0x7f0000000740)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1, &(0x7f0000000780)=""/22, 0x16}, 0x8}, {{&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002900)=""/220, 0xdc}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000000840)=""/51, 0x33}, {&(0x7f0000003a00)=""/134, 0x86}, {&(0x7f0000003ac0)=""/140, 0x8c}, {&(0x7f0000003b80)=""/229, 0xe5}], 0x6, &(0x7f0000003d00)=""/31, 0x1f}, 0x5}, {{&(0x7f0000003d40)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003dc0)=""/170, 0xaa}, {&(0x7f0000003e80)=""/105, 0x69}, {&(0x7f0000003f00)=""/198, 0xc6}, {&(0x7f0000004000)=""/192, 0xc0}], 0x4}, 0x3}], 0x4, 0x10100, &(0x7f0000004200)={0x77359400}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240)={0x7fff}, 0x4) r4 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) r5 = socket$netlink(0x10, 0x3, 0x12) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) connect$packet(r4, &(0x7f00000000c0)={0x11, 0xf8, r8, 0x1, 0x1000}, 0x14) 09:45:58 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x5, 0x0, 0x3, @loopback}, 0x1c) [ 1346.170511][ T3406] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1346.183490][ T3415] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1346.213236][ T3425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:58 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x6, 0x0, 0x3, @loopback}, 0x1c) 09:45:59 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x7, 0x0, 0x3, @loopback}, 0x1c) 09:45:59 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x8, 0x0, 0x3, @loopback}, 0x1c) [ 1346.657637][ T3425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:45:59 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000005, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:45:59 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x9, 0x0, 0x3, @loopback}, 0x1c) [ 1346.701800][ T3409] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1346.720465][ T3420] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:45:59 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xb, 0x0, 0x3, @loopback}, 0x1c) 09:45:59 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x10, 0x0, 0x3, @loopback}, 0x1c) 09:46:00 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x2000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:00 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x3e}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:00 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x6112, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:00 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x14, 0x0, 0x3, @loopback}, 0x1c) 09:46:00 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20040, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0x2, './file0\x00'}, 0x6e) 09:46:00 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000006, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:00 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xfffffffd, 0x0, 0x3, @loopback}, 0x1c) 09:46:00 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x3, @loopback}, 0x1c) [ 1348.236759][ T3487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:46:01 executing program 4: r0 = socket$inet6(0x10, 0x0, 0x5) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x28}, 0x10) [ 1348.457217][ T3487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:46:01 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)}, 0x4) 09:46:01 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0x14, r3, 0x84c712fe4e0d10f5, 0x0, 0x4}, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f310000"], 0x34}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffffd) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8804}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="981e0000", @ANYRES16=r3, @ANYBLOB="000829bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="800002003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000100000000000000000000000000000000000000000000080003000300000008000400ff0300000800060000000000000000", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="3401020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x1d8}, 0x1, 0x0, 0x0, 0x6008914}, 0x40) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 09:46:01 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x3, @loopback}, 0x1c) [ 1348.789396][ T3515] bridge_slave_1: renamed from veth79 09:46:01 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x260b, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1349.170273][ T3520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:46:02 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x48}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:02 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x6800, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:02 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000007, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:02 executing program 4 (fault-call:3 fault-nth:0): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1349.609611][ T3537] FAULT_INJECTION: forcing a failure. [ 1349.609611][ T3537] name failslab, interval 1, probability 0, space 0, times 0 09:46:02 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x3, @loopback}, 0x1c) [ 1349.695396][ T3537] CPU: 0 PID: 3537 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1349.702902][ T3537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.712986][ T3537] Call Trace: [ 1349.716732][ T3537] dump_stack+0x172/0x1f0 [ 1349.721086][ T3537] should_fail.cold+0xa/0x15 [ 1349.725717][ T3537] ? __fget+0xa3/0x560 [ 1349.729795][ T3537] ? fault_create_debugfs_attr+0x180/0x180 [ 1349.735621][ T3537] ? page_to_nid.part.0+0x20/0x20 [ 1349.740661][ T3537] ? ___might_sleep+0x163/0x280 [ 1349.745529][ T3537] __should_failslab+0x121/0x190 [ 1349.750487][ T3537] should_failslab+0x9/0x14 [ 1349.755004][ T3537] __kmalloc_track_caller+0x2dc/0x760 [ 1349.760385][ T3537] ? lock_downgrade+0x920/0x920 [ 1349.765242][ T3537] ? map_update_elem+0x738/0x10b0 [ 1349.770270][ T3537] memdup_user+0x26/0xb0 [ 1349.774520][ T3537] map_update_elem+0x738/0x10b0 [ 1349.779378][ T3537] __do_sys_bpf+0x967/0x3460 [ 1349.784017][ T3537] ? bpf_prog_load+0x1660/0x1660 [ 1349.788959][ T3537] ? __kasan_check_write+0x14/0x20 [ 1349.794087][ T3537] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1349.799635][ T3537] ? wait_for_completion+0x440/0x440 [ 1349.804947][ T3537] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1349.811190][ T3537] ? fput_many+0x12c/0x1a0 [ 1349.815622][ T3537] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1349.821693][ T3537] __x64_sys_bpf+0x73/0xb0 [ 1349.826121][ T3537] do_syscall_64+0xfa/0x760 [ 1349.830721][ T3537] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.836610][ T3537] RIP: 0033:0x4598e9 [ 1349.840503][ T3537] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1349.860104][ T3537] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1349.868520][ T3537] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 [ 1349.876499][ T3537] RDX: 0000000000000020 RSI: 0000000020000240 RDI: 0000000000000002 [ 1349.885009][ T3537] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:46:02 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5, 0x3, @loopback}, 0x1c) [ 1349.892980][ T3537] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27c6ba46d4 [ 1349.900988][ T3537] R13: 00000000004bfcbf R14: 00000000004d19e0 R15: 0000000000000004 09:46:02 executing program 4 (fault-call:3 fault-nth:1): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1350.022214][ T3553] FAULT_INJECTION: forcing a failure. [ 1350.022214][ T3553] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.040368][ T3553] CPU: 1 PID: 3553 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1350.047849][ T3553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.057911][ T3553] Call Trace: [ 1350.057933][ T3553] dump_stack+0x172/0x1f0 [ 1350.057956][ T3553] should_fail.cold+0xa/0x15 [ 1350.057975][ T3553] ? fault_create_debugfs_attr+0x180/0x180 [ 1350.057994][ T3553] ? page_to_nid.part.0+0x20/0x20 [ 1350.065603][ T3553] ? ___might_sleep+0x163/0x280 [ 1350.065622][ T3553] __should_failslab+0x121/0x190 [ 1350.065640][ T3553] should_failslab+0x9/0x14 [ 1350.065652][ T3553] __kmalloc+0x2e0/0x770 [ 1350.065672][ T3553] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1350.076036][ T3553] ? _copy_from_user+0x12c/0x1a0 [ 1350.076053][ T3553] ? map_update_elem+0x3a0/0x10b0 [ 1350.076069][ T3553] map_update_elem+0x3a0/0x10b0 [ 1350.076088][ T3553] __do_sys_bpf+0x967/0x3460 [ 1350.076107][ T3553] ? bpf_prog_load+0x1660/0x1660 [ 1350.095421][ T3553] ? __kasan_check_write+0x14/0x20 [ 1350.095436][ T3553] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1350.095456][ T3553] ? wait_for_completion+0x440/0x440 [ 1350.095480][ T3553] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1350.105912][ T3553] ? fput_many+0x12c/0x1a0 [ 1350.105937][ T3553] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1350.105954][ T3553] __x64_sys_bpf+0x73/0xb0 [ 1350.105974][ T3553] do_syscall_64+0xfa/0x760 [ 1350.152299][ T3553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1350.152314][ T3553] RIP: 0033:0x4598e9 [ 1350.162946][ T3553] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1350.162960][ T3553] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1350.175620][ T3553] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 09:46:02 executing program 4 (fault-call:3 fault-nth:2): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1350.175629][ T3553] RDX: 0000000000000020 RSI: 0000000020000240 RDI: 0000000000000002 [ 1350.175635][ T3553] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1350.175642][ T3553] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27c6ba46d4 [ 1350.175649][ T3553] R13: 00000000004bfcbf R14: 00000000004d19e0 R15: 0000000000000004 [ 1350.273302][ T3528] validate_nla: 15 callbacks suppressed [ 1350.273310][ T3528] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1350.525618][ T3541] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1350.659648][ T3524] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:03 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x3e00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1350.809297][ T3558] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:03 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x4c}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1350.984251][ T3545] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:03 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x6c00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x5, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:03 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x6, 0x3, @loopback}, 0x1c) 09:46:03 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000008, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1351.196230][ T3579] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x6, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x7, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x8, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x9, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0xa, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0xb, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1351.832444][ T3583] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1351.988115][ T3598] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1352.198843][ T3580] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:05 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x3f00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1352.328800][ T3627] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:05 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x60}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:05 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7400, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0xc, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:05 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x7, 0x3, @loopback}, 0x1c) 09:46:05 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x2000000000c, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0xd, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0xe, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0xf, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x10, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x11, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x12, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:06 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x4000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:06 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x68}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:06 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7a00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x13, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:06 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8, 0x3, @loopback}, 0x1c) 09:46:06 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x2000000000e, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x14, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:08 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x470f, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1355.289997][ T3743] validate_nla: 11 callbacks suppressed [ 1355.290006][ T3743] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1355.458004][ T3747] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:08 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x6c}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:08 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x8087, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:08 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x9, 0x3, @loopback}, 0x1c) 09:46:08 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000010, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1355.666874][ T3752] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x2}, 0x20) 09:46:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x4000}, 0x20) [ 1356.303591][ T3757] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1356.505610][ T3769] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1356.678561][ T3753] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:09 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x4800, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1356.795527][ T3801] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:09 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x74}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1356.972493][ T3773] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:09 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0xf000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x1000000}, 0x20) 09:46:09 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xa, 0x3, @loopback}, 0x1c) [ 1357.146410][ T3808] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:09 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000012, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x2000000}, 0x20) 09:46:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x40000000}, 0x20) 09:46:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x100000000000000}, 0x20) 09:46:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x200000000000000}, 0x20) 09:46:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x4000000000000000}, 0x20) 09:46:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x70) [ 1357.773678][ T3813] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:11 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x4c00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:11 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x7a}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:11 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x30000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20000260) 09:46:11 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x10, 0x3, @loopback}, 0x1c) 09:46:11 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000019, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:12 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x78, 0x3, @loopback}, 0x1c) 09:46:12 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:12 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xf0}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000340)={@nfc_llcp={0x27, 0x1, 0x1, 0x5, 0x9, 0xffffffff, "cf66ecf62011593a05e2d8cb25a0cd4f7746d4c127f9c0eb8b35ea1cd04baed7468eb932178342b4ef5a88f9561d69847edc57b287ab777f18222c0c337c23", 0x19}, {&(0x7f00000002c0)=""/120, 0x78}, &(0x7f0000000180), 0x14}, 0xa0) clone(0x10000, &(0x7f0000000600)="d9575e65bd8f0ef040e1503df0413112bb4d8f1692b225599ee8b1f040ba231aee1f8995855da6aa19b468f62443e4c147db26d6a5d3db8dd910b583677a27a67dd3a37ef98b82e390c8b24cae14c3607c7a34ef0b8f98dd36fc9ff7637e1f608c32a0644097853d1b602a9d11f9a960c4a4bfac9bc32e16918e07ab1c5ba8aa183db45cb395e65478ca982f0aaac369c1c7ed81f328af23a8ef03bbf3d981103ab2177e7386b35fd6336024ef75ac5b5e96beb8f2f6b162d7056b97573f77e9646287fe64dfaef953d3cc701f82ea8198dcd060ac8bc3b893aa", &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="5b8398bd227ad8afa88a658f79e4f6927e098b9414ad1a3bb40e274f52fa5938539b85db711545d9b09a907a0c0b007464a74539a337f4b0d9651964e0787a82b8119511a7477c5e9967e3d0") r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x1, 0xe8680) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000280)=0x14) 09:46:12 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4d5, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:12 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x100000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:13 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfc, 0x3, @loopback}, 0x1c) 09:46:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x200000001, 0x7f, 0x2000000000000009, 0x4, 0x47, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0xffffffffffffff5f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000600)="0fb6160300", &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45d5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e", 0x2}, 0xffffffffffffff26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000500)="9700f907d8d068a4d3fda98d6f7e714251621d785b9efa4e40638a57c12da6c30875a07696ae0a8cb802062369ca623f006ab4a0f83ce964c91f7ed1814642e89afad70afbb024b3f10c503ffb6c5f58eda79beb2af99093c2881ac73856006e4fba81da7736a77e47b232b39fab6fe9b50ca21e6a3f4b0616b688e033944ef2b226696fff20e82f2f4f6b4f8471604a47031d1aa1e7ebf7b4fd5532850f82ab2ead6983edc987e2e817bf29773347753a895e3e0c958ebf51015cd4e0feebd44683d743684e73c574a3fd819385432a1817a16b24d0087f38641c473e6aeb94b6952a7083c17d30889617d3f756eb8d5ce8008a441761b0b373d7c78fcb", &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r2 = add_key(&(0x7f0000000280)='logon\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="57c351b679aa9d533683645b8d5e65cc56af9efa4245410f46648cf022d9e317abc7c0c01cd250d85b81aca0d73ffcab10f19dcafd537f3f2706647f2b3cc60a590d89d2064dd202d06e360882a6cc22e97202734894253652a7ade942c7bf7be4acbf35606e1cfe144f62e888ecc9f2c84445ff08fe0ea5e22639509d240be2553381", 0x83, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='ping\x00 \x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) keyctl$KEYCTL_MOVE(0x1e, r2, r3, 0xfffffffffffffffc, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x10400, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x300, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) r6 = getpid() r7 = getpgrp(r6) getpgid(r7) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000000c0)=r7) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x20000000000719c, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xf}, &(0x7f00000001c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r9, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r7, r8, 0x0, 0x3, &(0x7f0000000480)='!}\x00', r9}, 0x30) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000140)={0xa, 0xffff}) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x300, 0x0) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) r11 = getpid() r12 = getpgrp(r11) getpgid(r12) ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f00000000c0)=r12) syz_open_procfs(r12, &(0x7f00000001c0)='limits\x00') 09:46:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x282140, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x2, 0x10000, 0x259c00000000, 0x1, 0x3}) 09:46:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000640)) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r3 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getpeername$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000700)={'team0\x00', r4}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="30005ee900"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f310000"], 0x34}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x1, 0x2, 0x1, 0x1, 0x0, [], r9}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r10, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r10, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r11 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') ioctl$VIDIOC_STREAMOFF(r11, 0x40045613, &(0x7f0000000600)=0x1000) preadv(r11, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$VIDIOC_STREAMOFF(r11, 0x40045613, &(0x7f00000000c0)=0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r10, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1360.862649][ T3909] validate_nla: 11 callbacks suppressed [ 1360.862657][ T3909] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000600)=0x0) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) r4 = creat(&(0x7f0000000700)='./file0\x00', 0x8) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x6, 0x32b, 0x3, 0x8, 0x0, 0x4, 0xa06b6, 0xf, 0x2, 0x5e30, 0x3ff, 0xbf0a, 0x8, 0x1, 0xbbe, 0xff, 0x1, 0x7, 0x6, 0x40, 0x3, 0x7, 0x4, 0x3, 0x3f, 0x0, 0x1, 0x200, 0x0, 0xf6df, 0x0, 0x10001, 0xff, 0x3, 0xec6a, 0x2, 0x0, 0xfe000000, 0xadeac98e41047b23, @perf_bp={&(0x7f0000000180), 0xa}, 0x0, 0x9, 0xfffffffffffff68c, 0x2, 0x1, 0x2, 0x4}, r3, 0x0, r4, 0x2) getpgrp(r2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) r6 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x2, 0x7fff, 0x81fb, 0x4, 0x100, 0xffffffffffffffff, 0xffffffffffffe16a, [], r5, r6, 0x2, 0x4}, 0x3c) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x129000, 0x0) read$rfkill(r7, &(0x7f0000000140), 0x8) [ 1361.133512][ T3924] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:46:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x18, 0x8000, 0x2000000000000009, 0x2, 0xd, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x3c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000000c0)={0x2, 0x0, 0xffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x0, 0x7, 0x9e2, 0x0, r2}) fdatasync(r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) fdatasync(r4) [ 1361.410462][ T3927] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1361.533024][ T3907] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:14 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6800, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:14 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x2c1}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:14 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x12c, 0x3, @loopback}, 0x1c) [ 1361.661573][ T3928] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1361.857578][ T3930] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:14 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4d6, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000000c0)="cf712ea6cccfe954c67c3d379179132158bca801a2bf5324b1c9852c79308e8e878759adb0c12a337a912fd9c195ccb5a130838aa00bea7c2c274b5ea1347b", &(0x7f0000000140)="bfde8b3ed29555df781fe7d9544931448314f69a9964e81bc1895e79d063159cbbc669aa8a16786701391422b3202eca71006f361eaf8722ca177927c8d33a4c8c53c1305dd889d27f884c7c9769f0b4ffad535a9b7905e57f73dd8cebba053bba525177b1d0b044e9ff852cca"}, 0xfffffffffffffe43) 09:46:14 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x200000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1362.017068][ T3993] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = socket$netlink(0x10, 0x3, 0x2db233868caa8fbb) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@remote, @in=@remote, 0x4e20, 0x5, 0x4e22, 0xfffffffffffffffa, 0xa, 0xa0, 0x20, 0x5e, 0x0, r3}, {0x80000001, 0x3f, 0x100000000, 0x0, 0x0, 0x100, 0x8, 0x1000}, {0x8, 0x0, 0x8, 0x101}, 0x9, 0x6e6bb0, 0x2, 0x1, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d4, 0x2b}, 0xa, @in=@empty, 0x0, 0x3, 0x3, 0x81, 0xffff, 0xd119}}, 0xe8) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000280)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x4000, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64654430303030303030303000083030303030303130303030302c757365720269643d", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',blksize=0x0000000000001000,max_read=0x0000000000008000,default_permissions,default_permissions,blksize=0x0000000000000800,max_read=0x0000000000000005,max_read=0x00000000000000d0,default_permissions,default_permissions,blksize=0x0000000000001200,obj_type=lo,\x00']) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) connect$rxrpc(r6, &(0x7f00000005c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r8, @ANYBLOB="001200000000000014000300620f000000655f736c61765e5f310000"], 0x34}}, 0x0) r9 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x2, 0x401, 0x9, 0x71, 0xffffffffffffffff, 0xfffffffffffffff8, [], r8, r9, 0x1, 0x2}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:15 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x300, 0x3, @loopback}, 0x1c) 09:46:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f00000000c0)={0x4, 0x5, 0x3f, 0x8, 0xc68}) [ 1362.637086][ T3987] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ubi_ctrl\x00', 0x4000, 0x0) r5 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) r6 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000640)=0xffffffffffffff1e) setresuid(r2, r3, r7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000600)=0x9) [ 1362.869444][ T3998] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:46:15 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, r0}, 0x1ab) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x5, 0x400) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000140)={0x3, 0xe4b, 0x24d, 0xfffffffffffffffa, 0xfffffffffffffffc, 0x4d}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1363.145925][ T4003] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:16 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6c00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0xa48d02d7431aef42) 09:46:16 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x500, 0x3, @loopback}, 0x1c) 09:46:16 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4d7, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:16 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x300}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000002c0)=""/175) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x100, &(0x7f0000000140)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180)="7ff8be21a89863af9d7656ffdc4b886e7b412a1b9eccf979ef46c318099fd47c1e7252c6", &(0x7f0000000280)="e7ce3c0d800223e943584847db54730785b7e1772ac9e862682da415426e20983b7ac5786bf05a2b1006", 0x1}, 0x20) 09:46:16 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x300000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x200000001, 0x3, 0x200000000000000d, 0x2, 0x1, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3, 0x20000) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c010000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf251000000008000200040004000c00060008000100030000003c000100380004001400010002004e22e00000020000000000000000200002000a004e240000800100000000000000000000000000000001000000005400010008fd03006bc70000240002000800020004000000080002000688625ac1000000080001001a000000080003009e0000001c000200080004000080000008000100867c345a08000300000000000800030040000000680001000c0002000800040005000000100001423b007564703a73797a30000000001400010069623a6e657464657673696d3000000014000200080002000180000008000400ff0f0000100001007564703a73797a3200000000100001006574683a62707130000000000c000900080001000300000010000600080001000a00000004000200100006000400020008000100"], 0x14c}, 0x1, 0x0, 0x0, 0x40800}, 0x30004df4) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x0, 0x4ffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x11, 0x1, 0x3, 0x4000, r3}) 09:46:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) 09:46:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x18, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x3c) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0x8000, @mcast1, 0x6}}, [0x0, 0x7a7, 0x9, 0x55, 0x5, 0x80000001, 0x9, 0x2, 0x7, 0x9, 0x80, 0x4843fbf7, 0x27a6, 0x2, 0x6]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000700)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0xc7}, &(0x7f0000000180)=0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r3 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f00000000c0)) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000007c0), &(0x7f0000000800)=0x4) 09:46:17 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5dc, 0x3, @loopback}, 0x1c) 09:46:17 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x7400, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x5004, 0x10000}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x403102, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) 09:46:17 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x500}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:18 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4d8, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:18 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x600, 0x3, @loopback}, 0x1c) 09:46:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x3, 0x1], 0x2) 09:46:18 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x400000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xfffffffffffffffc, 0x101000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000280)="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", &(0x7f0000001280)="101a061f66275200ab56e2fbc5335f05f7f3d15c8b057940eb8eb7f8213e20988e4c201939d7ace2a38f589af462b242349608743ac57cea7add85d6df6e0919e2efd9d7230d1d4f010bccd853b8c0226d126b6f8558e7aff8022d274c33aa3737f610b5276c4b6b05b9d68d30fd42903e2fe0ebf8a1dd7f6dd695e261716bf95ebd092ec7cd876e502fb405433672f6a955027ac83cc0e18b8614990a2229a3993b7e7f37f7bbcc6965c1bf8c", 0x2}, 0x20) write$capi20_data(r1, &(0x7f0000001340)=ANY=[@ANYBLOB="10000900820505000600000000000000d700a0b908884c1025495e4cefe7d075694540caaab2124e98a74323038954bbc73b19f84e7c7bfacf37ee65463404a0ddc7f869735aabf9e6e1605b83b2488f78ff04b1382d55348f4e23a607bca75ac412694c6711a359c81a9341335b475417325896fd791cfd43525c9e0da37b66ab3fd6e03561398a5b8e016dd77b2f3e07a505a644d5944fe72fa04af293bbdc4506114306285abdf9a6f19a29c8f7c4a2c6d52776f0ba39defca6bed2d73bc2eea589f47ff9fcf4e9faa9f5d4af06f612c435cb4b0fc6776826ca98d0c1a877205a726965618149bb"], 0xe9) 09:46:18 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x1, 0x2, [@broadcast, @dev={[], 0xc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000280)="03de075dead3fa62930b1bfddeea694e830e9d70628e07acd03be51a4b4b554d0a3e7b513767192fd4dea2f61e5bda8800000000000000dfb2294fdd66b89cf56d4a301ae4e755e4aeed59cf58d5dff932335ecc7df779c3ae5aa39465ad507b0a87d8fc07b7e9796c9cc421f51c346c7141b224741b5de81833951cb40ee92b0d269e810c19ac1671555765d3c49df57e9649e40225a864548d6ecbda68ea3bd8342cb6ef0daa1166f561da68dc84c2c2775b8a3ea76360c7a8173e973e5a82cbde63c31f8a7883d5377181c9b7794d9b97fdc11e0756125dad9e48d662df98957c084c839d697f63621f6dd23739edd3614848b86824234560f1197a4faabf583f2c4221874d8680ad72d984d4aea184c0d015578fbac152b2397c067597aa7e6b6c00afadf56816125bac25f2f4fa8f7806359db0115d58ac91a7344b2bac48f8f148fb9dc0e9c96a4d2d4203f14c56b3b1cf5bccf848d33dacad6b76f2eb51ca4f0142e04e295ee76a317febf7f68c7c0f65e1467805036231e93185a7c01b0d9565404b9bab7e3d7090186f8189e9064defda25d704aab93bd31a", 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000440)="ffff69456c7e4f741287b8fafd03fcd12f84d90bc5073320ce8a2fdc481f30e973b6207b31ed931b421ce0247e9720ef36a831baa6a157738c49cc79d5ed905815486054faef04a0ad460d28cebf553d21b26e7df364a07d2285ee50750f7ee757c93e808c8c774a8996bb73925dcee5a773de692cbbe0ee6576b2eb0aca3747cce1544500000000000019aba921cfae1063ec40be50c3a9c3cc0a14a40dfb30530f24b24f480a96b2477557990d2277d0161d6c281d3c98ac00bc0d5b631d8f5124b795d144bfe3df0158ceb97a17f16c8940d380b98c9f47cc20df25ad14cd01b98723ba1ff11635e5", &(0x7f0000000140)="dea362588a3ffa5e42f600e0674c857a3c865986254a4d2d73f62494d3c5575a8788df"}, 0x13e) 09:46:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x44000) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1366.265181][ T4138] validate_nla: 12 callbacks suppressed [ 1366.265190][ T4138] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1366.402138][ T4149] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1366.628918][ T4153] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1366.756379][ T4181] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1366.882335][ T4140] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:19 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x7a00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1, 0x0, [], r3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc5c00) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) write$evdev(r5, &(0x7f0000000340)=[{{r6, r7/1000+30000}, 0x16, 0x9, 0x2}, {{r8, r9/1000+30000}, 0x1217487f6905a033, 0x1000, 0x1000}, {{}, 0x5, 0x44eaa5c4, 0x2}], 0x48) 09:46:19 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x700, 0x3, @loopback}, 0x1c) [ 1367.042394][ T4156] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1367.191414][ T4198] bridge_slave_1: renamed from veth89 [ 1367.240895][ T4159] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:20 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4d9, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:20 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x600}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) 09:46:20 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x500000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1367.428194][ T4197] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x401, 0x78b200) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000180)={0x0, 0x8, 0x6423, &(0x7f0000000140)=0x8}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='statm\x00') ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'veth\x00\x00\x00\x00_bridge\x00', &(0x7f0000000140)=@ethtool_eee={0x44, 0x6c, 0x60fb, 0x3, 0x1, 0x9, 0xffff, 0x3ff, [0xfffffffffffffe01, 0xe4]}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:20 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000030c0)={@broadcast, @multicast1, 0x0}, &(0x7f0000003100)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003140)={0x200000001, 0x3, 0x2000000000000005, 0x4002, 0x1, 0x1, 0x0, [], r1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000)='_', &(0x7f0000000600)="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", 0x8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x101000, 0x10) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000140)=""/176) r5 = socket$can_raw(0x1d, 0x3, 0x1) fchdir(r5) 09:46:20 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x900, 0x3, @loopback}, 0x1c) [ 1368.097655][ T4208] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1368.360657][ T4214] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:21 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x8087, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:21 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x104040) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='W', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e", 0x5}, 0x237) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) socket$unix(0x1, 0x1, 0x0) 09:46:21 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xa00, 0x3, @loopback}, 0x1c) 09:46:21 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4da, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:21 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) 09:46:21 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x600000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:21 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x700}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f00000002c0)={0x5, &(0x7f0000000280)}) accept$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) 09:46:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000140)="1b148b6885a64e7376bf388d8322ed138066670929db7ed18db89ad596f9ebb5fd52cbc6211b8c48439771795801"}, 0x0) 09:46:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') socketpair(0x0, 0x2c60502233c2d646, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000004c0)={0x0, 0x2}, &(0x7f0000000500)=0x8) preadv(r1, &(0x7f0000000180), 0x0, 0x500000000000001) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000140)={0x2, 0x9, 0x1, 0xa6, &(0x7f0000000280)=""/166, 0x7, &(0x7f00000000c0)=""/7, 0x8c, &(0x7f0000000340)=""/140}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000400)="dd63a9a2a0d4736de9984c57f8f7af357fd52ea70566ef3ba955c78701009920ea80b99c945ee76f35daee33d32ea3c42f1e1ed0300cfe3703503f8cebac84dd18677006966d51fd7b4532b7bdcd9c959add27a0da8cb70f6c461028235f83bfd343c3778048fd7d67fed7c2b6f8755b360135205822c95193ad112f475c83dabdd2e398161c1bafdf6793723d"}, 0x20) 09:46:22 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x81, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000680)={{0x8001, 0x1}, 0x0, 0x5, 0x2, {0xfffffffffffffbff, 0x3ff}, 0x9}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) socket$caif_stream(0x25, 0x1, 0x2) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x3a3, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x41b) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000180), &(0x7f0000000600)=0x4) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7, 0xe2d02) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'cpu'}, {0x1a, 'cpu'}, {0x71, 'memory'}, {0x16, 'pids'}, {0x2d, 'rdma'}]}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r5 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) r6 = accept4$tipc(r5, &(0x7f0000001580)=@id, &(0x7f00000015c0)=0x10, 0x80800) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000001600)={0x2, 0x2}) 09:46:22 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2c01, 0x3, @loopback}, 0x1c) 09:46:23 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0xffffffffffffff54, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="40ff31ce48ab7600000000", @ANYRES32=r5, @ANYBLOB="14000100ff02000000000000000000000000000114000100fe800000000000000000000000000028"], 0x40}, 0x1, 0x0, 0x0, 0xf028fe34e7b48003}, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:23 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3f00, 0x3, @loopback}, 0x1c) 09:46:23 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4db, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) [ 1370.893231][ T4333] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 09:46:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x20300, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="12d4202c9172dcaac7"], 0x14}, 0x1, 0x0, 0x0, 0x11000}, 0x20000821) [ 1370.946187][ T4324] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 09:46:23 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x700000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:23 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xa00}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:24 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x3, @loopback}, 0x1c) [ 1371.680772][ T4332] validate_nla: 14 callbacks suppressed [ 1371.680782][ T4332] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1371.824205][ T4349] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000280)="ad804d204886c0e3c49740bef3dd7a14ae5363d27ae8ea2e469f229b4e998a11790f1ca9a0bf0e8d74090b3a945cabd8957e620f1c055b5a62a2499592eb6a46cc687d8fcf0e80df95d4902ec3fd918036a31190e34df510eac21fbf8eaad03b195de0125b2134294c4ad5eef0992f6cc0ae02f8ca24dd49a48e1210d90ee89e6af1f76ebe22b87f85c55ca73e7ab48e4e97b44e78da", &(0x7f0000000140)="866d40678d382a7f022b0fb569a78837d7fbd98da12112aa52724bee68ffacf3e97fe80a8f1f87334bdd12b07c19a7412613ca59a69f7b78e19f8986a7570c0000000000004f3970917d2a56ceb77ede7d38650796984f43ca210a871dd2af7a47795ca0b520019e15e808e69229343c2129a7f0f18a3eeb59b7cce943", 0x8}, 0xd4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x400000) 09:46:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000280)="7865684e84124721abf8f42b628ceabdefdca96a899bcc0c481606f386ca4f8759e761bde9673ebea94e4d2b85fdd0d22f9d71bdba407aa40014ca6929697a0d361ff77c821fa2cb72dd8cfae1bb56e7309f2d7838c8cb20296d83f77d41717e1f53bfc7c155aee5caf0aa18b2ae22bab6a3863c6169bc34328c6a7f8adb6becebc6709d0b4aced576a7ac6f3a132c2523372f1f11bcc296a2428b", &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'caif0\x00', &(0x7f0000000100)=@ethtool_channels={0x45}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x7fff, 0x4c, 0x6, 0x0, 0x97b0}) [ 1372.132502][ T4348] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:46:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280)="854d0f219498424deb7c6d4fe1f19eb4e9f0b662e161e04fe177be8b79a0ae74fe7c6ccc6f8e710104039781ff8e066278188aa4680dbf4a5da9a521253262095e3f197e8d3ef1c046d1ad308104769196019f9f7d6d0e23f320ff0d7b88e35505bcc778dfed0cef25504e6a6f2791b0267837f761892b4980c0cd50bf2689dca2a44d1ee9fff9b0c88c155bcfa9f291b4885d26fc70f7313d3dc7ffdc35b400a5c080d65a", &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x4, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) sched_getattr(0xffffffffffffffff, &(0x7f00000000c0)={0x30}, 0x30, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1372.341089][ T4334] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1372.531580][ T4335] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:25 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x30000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:25 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001640)={{{@in6=@ipv4={[], [], @empty}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@local}}, &(0x7f0000001740)=0xe8) sendmsg$inet6(r1, &(0x7f00000018c0)={&(0x7f00000000c0)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000000140)="3706407a9c2cdd44b1a656c908c696423f5fa01993fa130ac1bc97b83d5cd8b08e81f7527cbc6e21be1dbe567a23f0f95ada2e64", 0x34}, {&(0x7f0000000280)="dfbb1136241f985b487a648873cc60863921a5c83fbe94d19e71d7e2a2ac3912e44738b33d1c646b7fee444d9a274b6b21e713b94be3f8bf5006b951f7cdffbf5d6b34f97fe39969d535f479ca6dc7d46e10256083a46b6b28df5c9a047a46ea1a8a3eeba81de0a7ada08459822f8a50e92a44d9085e2d113a1109e7a62483b9b0da63bd72b2257c7df1d08da2462a05fc4f7b8df5d44ccc367561d9bd2b7d4388a2212ef71f2689edf497c006e6fe801d324e9a2e585896b06828850876a52a662a58dc118322398d9b70870ed16aa7f01299a98398a2e1a6d28e0fa4bf3160caab4bf5593279ee5bdb97c31f919b5fb4359b183d00006c50cd7dfa8bfed9c58a7e92713a41dc31cb60fc016aa516ea17f7e80253a0c77e163918484050962b76537733aa9e25d6386644670927f09834d1708b07b7414343b1d56c9aaa043f57a62786ce9b11bd2a5f0724f090892321a112210eda1e41ba5313824e9cc2a385037b86a2ae02f3095175f299d0e1f85e6603a7874d401f019b4c24f574961c2a259ab82f657efec07bf60f9be28b83dd59186c4b7cea2050ef37ca9bcd96cc5c539435d90529abc723bfb2fc23f85bd2ac49240c78119a3b8d088efdc31866237cebd81ead26c76ec3163eb639225ee6d9ad8618a28c677b434e6fa74ca8974d24aaf121a55e34f03e2866e5631f5f6895634efb07c2da899cd7e436cb318e010051e74d74306c61e271f674660a0db7dca6940a5c62470d6e8dee98c02c1154ff5517dc2008fcb51d7993e46d2ddadd1caa403b7135671698075efb033afb59f16929c8638ff1d1c5a828e8571826fd75647d00f28b0b18058d6c0c4cf369df32d73741a73566bc1edc864fae23fbc52bccbb453780a165e134189fd2e2c53f971a41c3ebb9c00d46e8e64c40dfb8033ddee59b2824ce0579cdeedd9ba2e8ef12539750e5e5bf564568023862a204dd82b317da4471518a23bec42d420e13e61097f241ec20be3abfe68bbe871401906755f4364bbf60d878aabc6339f2d3394a9720383e1f0a584cd0f1b5d251a5e7c9b1a0c56e7195aa5218e69262a6a80189c35a6e2291afce205cdeca344c4fc04f9b7f3fa60ae0d58a677a6c1990713810b8b8182c96efe27df59bc003671c23eda8d9af7e02aece442c1e5216cef88628120372b55f9043ad5b26ef9763ee30f509a729c9d0dfbf4fc03326c21da3a48fe79fbfdd24576c1406f71223360a61c7342bd808254ca0d5671dd6e5da994f3c5e76596a0db807a9493e3f8f6b1797b02221f8052ffc71e3b28390517f375e2bc4ad81ade54f2d0d9ebd7e67bfc38a023361726e27a01369c8b69efa062708580856c6dd387ba3ff1657940e3b6c79e9b81e40820b225987e4dcff54a33e272b1f8559b5497fdbcf88469feebcd02c51b6e39c235f6ff98f166cbe4c9eaef87bff8aa5ef1939b86a0414098abe79544aaed0d37fbccc3dd6af59a1e39b6fcbac28b92d656d79a4ebc81eb38f78774be696d15aa594113331ed9de8689bb541cedfca7e0eb3f2edf7ab11817175368de9770d0b358fe82c1b9192f2212565ef81dc571b593632c23045349931d0d47f4b24f2fc212431c5f9039fb83e348a0ab6df104be004db691a684c8a04bfb7b6f97d9ae78ed223510e084441798bc50801d9eb8587f600c2190b9bdaa9777dacc3a9c49f0db8fd54ba79ab0971d09ef561397408a7d5e3bfeff01765c1f6cc53d4134e8d467e9d5cd818b52a77d47b04942a7b0af9421969426d311ddf0da77b0611baad7e834ff9a8bd65e241d7ace27fe907c882e3b5b561924ecf60517b30ac93d9ce1641a45c772e3156189da48aeb3cefbcf43ef78b24616de1b5e42bd621a15f05ecc545f14ea82b57a662b1c1e206cf107aafec5d0322a36f390e827ff26ea538f0a45d4505dd3d73271a76c05144e52f9ce55d0989f95cc63e70e6b48b011cfd253a0bbc29abb14e2aa209e538043d1f921107afbb95c3a3205b5878b3908f8f4d8fd3209538ba6258fc45e0c8fdf04f461f16d0ac35f7dba568bcba12a802b55567b64f824c325ef74d1c0d946368a2c46524125bb28cce3f7c31662a8d127d2ef375b9260dc7fc405b4509b14a6db89bff8647a5165745958e6c2b27b5238039f6b3fc1bc5fe829d166bd23fb3936793cdb15c98653ccda10561ae15e15b76f022f61e7d183049d5885ad339025ab70791e5a473cec3409284178e420a7d72c816977e700161c284f40c57f6a6fa144f6ca1157a95481a14768e0378c5a3f36feaa87c7470e0f00de807fe7e7d149552295cc74a19e7c832a16ec16e211864ec692233b9e29b3f61ad3c93dc452e826a9fdef784475e40c6a1edf07b095ee3b3a444389d587d2c3ed69c27577d0e9e42407ccacca7b92cd88f892f57d50826de2f4b31623e2719010a583e9769c35ceb872ae794b7e6632ecccc6832865f8ac6f52a1e15fb6acb03c986e8453ad9f2820a5d8f217297cbbcf8113f874c32fb8bbe50944fea58d1d15a966e05133bab7739b8cc08b79fa8fa1ac32f7b0453a12090216bd6436fae9d40fac3e78aea034bd3e1e60e947ef13fa2db2ee78790a135a4eebebc29f83a150e89abb8be1476b4e180daeca11e40cf2b6f1269b15478979e6549d3e0778af1c0580eed7f8e25d6249f0a0ec33f40428919b391584b2ad6f686d3f67c70ff66d62b5afe5edd0ca2e3f4479527c451248d845d343b4a1b48b0912da0b09f04a37862d0f64b1ad9929f01485a40c7b73ac1558f95fcb6ff42a08681a70a1be1464e4fda743c05a50b3c39d42bbe05668ae7bee33fb466e997f74353924605100638b1046c70a5f29bcda5e6b3d89e8a265b413a78d5ca2782552bf3c7dcd5f0c702d8d93d779b791aa18ffdca47c5fd398d15a81607c890132d893b193a1597f517285792e4a6170644a37d1d6212af2acfa62450fa0818f7c08c08f3d691be4c85ab8d79543f2ba0bbeb93d5136e8dc88239b061dc3e4e6c68dd9b9fea23bb573bfeafc5fc18e74548fbfdaf0fad198f526e6def49f57e48cc431c233e0c15c89c5c52b6ec0f53bcbc9afaa2b9bd02847d646d647bd0a5233a616448f6e9484530e57a032e509a87e9c50bc3e8cab47a317bda969a3e89c33b1b76b83b30d59f41bfd30ca99209299e68d19a8fd24d82b510befb8ca0f20e2e70f3b7c7fe6713c67a9b296e36d18976eec89bf187ccb1f4282d0ecb535896e006423e3005dd61c38299b787730c68fe20f79a8108ad8051312faf469d7aa866d3f13cf261c70892cbac11da64b4183d141df2ff9e4463c17f5addf26e6d0d3162b878882d1578b1b7ec5f2aec8a235450ae7a8ba14db65ec532d9ab50cbeaf1503b7d2de43fe85ff03ec39c87b6882535e6523f921ed61b6a79b3199d397867b4d1411ebd4b598a1656f8d94c41522ab352b1a1304cb7a3ca43d9468d44f7aa7a56239bf3d2100d291d2b79f28586a3144d056637b974b5424e2b57a7e838ec3298eb3a73bb74d240695a24c014ad62462939f77b735eb8f5512b58d468ffaf725e4d0a8e3823ae0f0f1cd99843d50375051a7b1922f59724afd774897e821aa48e783bf62a4414c41f7828a4e6f79828618306e83f9eb65318966e86b5adee7fc801b5634ffccf2ca56cb5eba9b7e23afeb04158ebaec7760b6078c4fbab5c91a764f710a47c15c6ebcb83e40a3bb317169117125470baeb30c229516fe04e47188a4f7c69508f3702aa75246a6c79ee1b82432b1ecdfd0707468c2d9ae411604e2068d68835fe73fd5e5a30a37d1be4d23353cde81a00af675000f24301df32a728435f7dd26330439819722e00e33d4f6a9229bc554abe8af96ac85eed643eb33829218ff47364084b443fed3034eae2a89853020ee3402fb24fa308e1f07f6968460d440fbb0bac3d3aab91259aa915180a0d13b6881b748aed7fbb7d3768bdfc04c45f53db1127de270e10674826677742ef705cc0ef5ab9b7b16721130ee19cb4db87815d895fc22877b05416bf1a57d403e5040c8e27310da7fad727d5f2c6aea96bb229629f79974a4d7299242c98ebc3c198a543d5b61edb7bea41f6554696f57318f354a3b73536b96d0146e19993fdfcbb81bee74848f0cdd13f6b2a0de30a33b198aa19e2ab4046d7f92f524ebfac3a49b45951efccc73ed5e0d45d5a61684699d2ed0f913d8b1697528dac33c99016db97950aefe8e45c1f511ebb7d4fd2111b4589812780215083224b91f3cb48f7ab5fec1821e97db754e5052b0166e4ad8d25393909fe90f5329542300a9892c4e8daffe4f2cb7fa33ba0f1cdb00cdd1e20dfa547ee7c72065e92856e2434bd391496293d7f850f47fd9ae112a1eafe64439c29497f7acc5fc9673c48d818273a4076afb5b89791775fc7750d25e60c2793141baa01ca507dfd4c2df06edfd19e02d6d83a130315cc6816289d688e1508d65dc4bcfd5b04d21412a2795c2fd6932a6b0bea113eeae4a8edc94897fde3f9cce7272b9c34f1a7b00c3e1c6c65cfb9fa27a30b92a6a6eba268a0944a5e63285010a024d4d4d602f1ecf665746db5d9018503af38e3ac6c64de6a18fcaf33e0a5129a407f145351d60e6ca0fea96e9f0f234dd00e541a0562e4716bf9c9537df61e5c4b72528dfbd239b7397fce4efeae3d8c8a3afc4292d4643c6a746a156527191d97fe65f9808679f05c5fd9c83268de6a9eb1b6db5f6b9d46be9745c4b1ac789f7581be73407be87c89abf5ed0d4784ccdb982282ad5049d1a48ee65d37f54b23ecf06328b61109dc8d1832f9c2afaf89a6988085ceb5650a29f4323e257914feb66122147c158e7d9fe057ff71c8c5b77e73afc226e623f43f2e38b657f1b4cbce1388ee3ffa6707201c9be2e8055a0f5938442ec8ce85fe04cb15d181e25dc71da2dcf31985c795397f0d20fccd93e55742af50c144e8413dfc69e1cecc5528bbe56f9c1a6dabc004abf9acee6264fae3886fe1249042397a8409dc1f38b93c2f7b4e9bf2ff9236bf2aa6049d324f704c173a9162dca697119be815e7d19b4c1ec8c612dae5621170340480f0fdbd230d7fe3c219d2a5346dab31ebe478f160911fd2075f82b62f3989e03d6f119991c15efe75c82681147def8fa37a3281bed5da2918b543937adb3d21aa4511f53015b76f06635703d78d99f55019a155f677230a86e4613ad32e5eb16c52bca3517d3c71691217f6a01f8adfbb430df10e37f83f0f8c8e226bcc575672f6cea0698365a4ff4e066f742d0629c276fc2105102389c12c15fb766ce39db4d458bb97da21b7a95b2fae65fdc89415f65a924fe3b2478265d4e7629e6cd2fd0b39d84039f9cf54440737f358018ef378d58a8f971779179230ce5ea5e053c2d747dcc4cfd5223a3d5a9f26801d8ece54add3734421ee3d834ed30c0c7f50c1166dd44b8501753277b94f7a0e2067e5250397fda321d23498273f45331719d1fa07c6c26ee63ad86943f3212803dd5e338e6ee40314ecfa4801ddba934c3d8e51b7be0cf8d11cbcec1a80feee465286d25e2f8c2e7bb1f08ddc475f36676228b9f80cf3a82dfe6af181a7f86b74226318cb5b19d23cafb2e5fa947f4b1477ec03c8d9cca7597bed5fd55fc7f9b3b48d6842f18d59e78d5b1158e2fd8c5f00eb712685c89d91a85776921f256a9f21c32ee85771f9fd3534beeaac4e4555c706debc1210c292746d6888c82690d6232aefbf04a753c2e80f4eac0f5810f3e477f8d3e4e3c7db4642e5182fd22abbb1d5a5350ef9", 0x1000}, {&(0x7f0000001280)="3bc005f0d9a58e3d8b9ce7922ab6f472af816b90100876601f8e6b958f30f49d8fa02279542608cc554889fd7a851203f7c5db60b9ca3df33909b444f53dbd812cd7fc79b24ccf077a9083febafc3ea54ed6ef99ef557b62255fed04ddd4bee3f6a14f2cf032f3c643838f823c0c123dcac23211b50b685246a1aa599d137b345eeda8b0e1824cb29274b25c1c78d1b277d8660e126fdab8f21e8486afa6d0713030f34f3b051a5dfa9e5d720745c9edf1b2142f709682b01a8dc61cfceba8188db9b1664d831c0b74", 0xc9}, {&(0x7f0000000180)="d5ae6b66474bb58accd824110b14cfca490902a100fb8bf3957ee6481af98f29880cf7c23715be213c5f39b55b731ad8f506519d7357e18e9bb6", 0x3a}, {&(0x7f0000001380)="2e60cce91b1e55256a6e6aeda13aa434e52f3675ddfe77d78368cd2e7ddb736b5867abcf890048e297d816d256b5fb452bd2199492ff299627933a06991dffcb80e57813cb5ff7bf877722fad0db9d5b2864f743dcea7b289ca9fba56ea63d7892343889de49f15aaff1c93a109ad9ec461b8c255edf47d6f2017845cc24394d4d676cc883", 0x85}, {&(0x7f0000001440)="a1e0c9d9e45faae520e297603164cbfb79b621a25eac680aaadd907e81c28d5e4bb0f13d8157a02f59cde9a183f6b97acdfa7465d7f9ab691299bac42aea120a0e60aad2c2a6802440dbeb0d115d1d4c42e034d6e04f1014d3ee9b72a285ef01d55a53ec483374b05ceb1d836f9a53d38ff8bbae9c5f252782f9e37686afa813057606f93ad78a9e6d85d2c6e65052140f17bcb043684182f0f740f80851", 0x9e}], 0x6, &(0x7f0000001780)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r3}}}, @dstopts={{0xc8, 0x29, 0x37, {0x33, 0x15, [], [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x18}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @calipso={0x7, 0x50, {0x81, 0x12, 0x5, 0x401, [0x13, 0xffffffff, 0x1ff, 0x3, 0x7, 0x1, 0x1, 0x8, 0x0]}}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0xffffffffb2f669d3}, @generic={0x3d3f291d, 0xd, "6c1ee36dc466497742dcde3d12"}, @hao={0xc9, 0x10, @remote}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}], 0x108}, 0x10e840ae40055df1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:25 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x7800, 0x3, @loopback}, 0x1c) 09:46:25 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4dc, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) [ 1372.679181][ T4366] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x14, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1, 0x0, [], r3, 0xffffffffffffffff, 0x0, 0x8000}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r5, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000000c0)={0x2, 0x6e57, 0x0, 0x5a, 0x1c, 0xbb6}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1372.958901][ T4351] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:46:25 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x800000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:25 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xe00}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:25 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e", 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000140)="6527a57b3cbc03051904954c46572500"/28, 0x1}, 0x20) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0xc907, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x2000) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000280)="e59d67b1353285941a4aa6114c8c8ac5d13dd08c2c63f0e5599e8ed37b703370fc7ef0d907220fb0e390758047e05a5ed47e8b8f4ca2e431c8a0d1999b53ab0ef11245150b0aa4b8ac14fea7daf6b279") r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) r3 = fcntl$dupfd(r2, 0x406, r0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000300)={0xc90d, @remote}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x1, {0xfff, 0x8000, 0xfffffffffffffff9, 0x2}}) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1373.160450][ T4389] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000600)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x3b5) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x23f, 0x6e8e47bc2dfa89f2) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) signalfd4(r2, &(0x7f0000000400)={0xe7}, 0x8, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x7, 0x5, 0xffffffff, 0x401, 0x0, 0x3, 0x2, 0xffffffffffff8000, 0x2, 0xfffffffffffffc00}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000300)="0a0d922a306eff6cd233bf984bddef5248cd6fa5ade611fc95cddf346c256ef3853958f9cba1bf1ea99613c5549a6e487e9f0ba15dc0796438fbd2959000528ecf8a64f1a1d3162765fc4c6e3291d8c7a3f63991c7b7450ecce8bf24a27d96f65d1511834cfac7d3f5621f81fe4271a1a69b8f2b8cb5279da7aae83f323e33684fd654010c5eb7b95efb628a7b2118dd8cd585429ba112f241a44c2f1ec3712ff417769e03a5fa4de25fb5058665ee295af93478c0b8f43d0208ee6aaba541c8dcbb72366e443d54", &(0x7f0000000400)}, 0x20) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x9, 0x800) r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) write$binfmt_elf64(r4, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x3f, 0x1ff, 0x3ff, 0x100000000, 0x110e1a19c97fa84, 0x6, 0x7, 0x190, 0x40, 0x13, 0x200, 0x3, 0x38, 0x1, 0x2, 0x96, 0x101}, [{0x6474e551, 0xfffffffffffffffa, 0x6, 0x1, 0x619, 0x7ff, 0x10000, 0x2}, {0x70000000, 0x5, 0x80, 0x5078, 0x1, 0x0, 0xfffffffffffff65d, 0x7}], "9d918ec42600074b1b27581b8a2cfadf9649f329e33fb3af5824ed12ca35338534afefadebc8c29f7c16e63fbb5bd781967d7bdd3824476559596b15ed4726e42a1fd0299f9492ea936e2aa2afd2ff740736718ab868cf1fcde0123ee24f8402d6098eb1314c9ee838d8145dc48d9b9882d13be71c12", [[], [], [], [], [], []]}, 0x726) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000280)={0x5, 0x2, @raw_data=[0x1a, 0xfffffffffffffff7, 0x401, 0x1, 0x10000, 0x7, 0x16, 0x1, 0x6, 0x2, 0x7ff, 0x0, 0x401, 0x4, 0x8, 0x4ab]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r5, &(0x7f00000017c0), 0x1b4, 0x500000000000000) write$cgroup_int(r5, &(0x7f0000000280)=0x200, 0x12) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x7, 0x3, 0x8, 0x30, 0x1, 0x3, [], r4, 0xffffffffffffffff, 0x2, 0x4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:26 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x80fe, 0x3, @loopback}, 0x1c) 09:46:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1373.729505][ T4392] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1373.891226][ T4420] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:27 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x71398, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:27 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e", 0x3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000140)=0x4d) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000180)={0x3, 0x8}) 09:46:27 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xc0fe, 0x3, @loopback}, 0x1c) 09:46:27 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4dd, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:27 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e", 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:27 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x900000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:27 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000300)="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", &(0x7f0000001300)="e240a2e6c4dd40af90a0a4d9f30f773863ee0c8d7df8b347f130e3f559c181c95f4dd4214939badbdfe2b005ec8e230a8c04cb6d0e51611a00d66614cba36d3b92c31d1eb9e560af46fa3a762fa44dcb38159483d1959a75587026582294534252fcf1f87b006df96b13b8a6f9c36d70199a75393df34370b8e894c3d7756d64fa8cc26006d4658c809d9e2c5e85cb916a5981f1a0e23711f2b524ea20b1695ba1cc60257342b38e1487fc689c2c3903c875fa8f1ac523065c91efa8b55c6888c9c40bd3418bf67298d66fd251e6993462603636651cd82659e7e71f90a58246acfa088b4ea2e6bad369045b01b81387493973d1f0f3505cd8103c54bf7d1c612c44e3e29abef1608aeafc73cd98cbff323259e27b54b5a3a0c5c1abe02f59f624387905c2d6f8dd20424c1d80aa1c2211edd0b17e94899ef9bfa30b60a498d9d056d6e65f66f9f951df876c0d726d26675ae37d2a0a0b83e4271b42331ed9d0f4852272ebe0b34b64ffc429a721431c7dd6a56ef0d94643feadb91a03a436188903ea1517ade655c8c0f6d8667d6a14cb2be3105c1cbf2405023a59e16f689f33f8b8b38e9b3a19d304f1e68c7a72663dcde0a6375f12c003b4f8dd57a1b5a3049671b58e2fdaaff09ed9fabbd60f14512ef9bb49c70e6931c4362876cf682a0964d97dca7455f9135be75e903d69516faecb8683bfe6970e7865431e5bc070ce1e6042b48064fcccb346866cf987c70d6734773d1bc2a080ae54ff234feebfcdbedbd30a00907f25880015c27e3a00dbbfeebb4d3b9292b9ba1de1451e532fcc05409e22100a72cd8c406289aa57984dac1ec56622c3fcca908de0d6229450660940a85b6bba9c2389000e52aa563cbf00139f6b9e27a47b47f51dea28eaa26a51f7efa7aab42525aeb2a6a926aec21d5470f86679c8e62b2fd5c27cd3b9fdd7e84a9cf5bdcb061e3f786afd2e3ba0b4c77b8a482811928af95d147ae0bdc4632ec65ca6a4587ed3bb5bf1a1c511cf3d7ad0aea8d2a093978461b170283a09a0148eff8faf538f07cff195ad4160d3848a557a60028548af38450710f9980a1ed0d43fc9374efa1f0be0026f575e89e6c8ae7b08d787c18dbb5cfce2d582508b183a7603348d5a77ef80a5e6bc83512004f440efe227e9670ca891ba45c4e7fae34b3d5d33f665fbbe161f9959a59c683fd63191736de3820ae0ffdfa50b84dc318fb88458834ee6c7045a79a221c682c0ecbcfc100e5b62e434e13daca17b753905d575637c47e7c76575c8074afc8f3a0376843149aee5c8ba124a41ff7f18f33bd05f607219c5b39be234e9fa2057ba6674a70140b02e3981ab88d6fe3026d73a676afc7375924f220436bdfd3a9a089db635ede7562b8dd65e95d7dd9bd22890e75c8e2769548d5dc82fda3c06358324eb1b4fd358914228d20416e194cb3c3de4169a1c594ca11ed182825fd5d8fe760b9edcf751af17e837a325fa6220577d3dabe386775f67b617d3f2e9d37e85d4833d119ebe1fae17f6754fe68db6f982bfb445dc3b444f6b38ce24963395c569cffd44cb04dd6002347a5aca73bbc9828ab1f66f3996c9904cf9666c19eb11a9ccd446f803fc3ac627aa6861ef855d94f6bc8c9034e363faf75f78ad7c3b63f4531107f6350205a9aa941b361701d0d826868ea3163a262a43bda2da4d2b36b9a2f2235c3caa53937205c939602a9862c1e0629d63392f48d456de13be303976a50592a1efbd876c0c2d2060678c92f84461ea130c05dd337f85449afaef4321f761247552982950d99ce8d813ef7f201aa8e756f29709ac260040b6965c47c7860c282ca652aab699b23f47c3049f5a1cb0f65aca0d0a0989fcb5f438ddf006260f4c761dfcc119263f0efc8ae70d84633290a0a58e1043c538d6226a180c74e2c13a8d8b7389567b31662eb4046a0533064c3eeb10be62728bd9e4b03c69448b6239b7fdf5f2c573217bb7f8312687ac0162a06ff37ce0ade42eb982f4799e84d9e476f7418cf4b53c245fa76087a15287076df1f41825420339b89f57d7026a9af37125201a250ae8c826b67ebaef3dfa75724304aeae0d152790bc2116545fd1efbd00486e108681f75a88f7360feb0981da88b722fd3514781df0a28f087c75ab98f9d5bff07ec184c3b3ee2b138057d33e3b06340c85c396082fce55f4c71be997842c19b434fdff70dd6d96ae3182809dbef575afec57af79e2cba155900a974d8558e3699f61da50c6606dd763b536b5caab5a8948017b14320e0cf8a0b306e831e8b7e247db196aeea756f08b7ddd93da2d925bd9fe913c07b37a75a30ffe9eed02f9f50698863c0408baa6f06ee9b01665ab0999660b4e357d06a9c5bd9f20c01d0a7355fccabc6f7b773853c9b61fba46adc4c3d9d258f56dc9569e96530c4b52f74da09dcead7368d962b4600a2d08eeb1671e7155e212c82787c384f2796e7dcad6587577171519b50d11ec6224a163426570ff2e7495eceb8a21f3ffb7dc8e60cd91504a901ec17ab68f0a18c1d21fff03ad219bd1efeaa7cd05a4b410e88e99a7114efdf733c83117d529b94dd1b374ed0a1310bea117e33cb4c423705a466282dd0db7170575c4e6b67a1da452638b63eee3fbd4400a816439872a894df4fc332531d98f03b12e26a1870af8803b94dee38892afc6356edcfcb3aa84e685e32b0d19465441a60e96259969c8abf80b83f2bb8cbe19f40fe1b53ce407add87ed149a762953643026adc555e44afd061d0ab2c1f35d47bf05afa8d574293449d28f62907875c5f72fd5debd43e1d09b569d979817feaddad65c4ed170723fab4258999284e133850d4882525626ceb5e78ba872ef90b8fb839e7f66259662d58f7a2955ed6d41c8d3d122860f1acf5b3a3d0cb09e9e7f6c3e550837b3ee2ec450aeb76475250aad9e5c77b16f714973da6bd39dfb918491c90e9c4e7b9953fc4fb6f026d99b5d827cf45359eac277d439896552aa8b9957e405b6112177912530a2573a7aec36b1d02bb0cc6668f820181f7bc39095e59a6f5418b1e8e2499efc8dbe3f86f1c5de3a05e7d50697a5b34cf83bd922920e3fb9ea1bde7ee218e62aae4cc0b531f86cc7296ecf1afb30761c6d2c5bc94a3423ca21de33e902c67b3a8abc5960ddc2b6c7bd7d721326f259f772788660e3ad6d5150c5b89c24116febb015fb58587a4849dd3ae9e2e6ccf044d8b94e85ecc1ae215922846e580775fb47585439e7582c80b039d151da013f21bd074ee54439e732cd46635ac44a34254409f787d52c15877455ab1832c9454647b4058591b78329d69baf48575df6e961b3450f4d3ce562e7d4be9891cd7a535fa9d770285a16248c245ed7a3b884ad4e9e1e54869334b0e4b7423e4377915002bc14497986b3823a7701daef4282912d0f5b36cd18f717b1efad8f0429987fadceba19987ff99976482edabafdcdd12dd3bd4989ee5c9b219bf613a51acf2508ee0a04c5da1ea05fac1753fa4af3b87f7ac54c046d169de2a28dcbecbc14597303d745d424b07692f815b08b75351ad906edca7b5496dfbaf752434bb4d99f1778e1ecf7a96853adab8b54c06eba14ef4ed291fa1ce84bf6bf06cf6b5e1470be095ba181a66dcc2995adfa9613e3ce845d8fc4ab3b69bd117a8a553b5f90d1bcdc21e625aff261d655d61d47ee0b9ddfea38e6c916b4cbbc38e1d6171d458281d4a2e5b848b083e24e0a54fb774ce47ca59734c1f13df757123379a6fef2c1b9ff2cacd3f2c189b91c7b206d17c830177731394417250009ebe68324632cfe64cafaeccb6ee205a3f06b36d300695f6fc49845771aecfdfcd022e1529f275736707e38d2e1d2525142bd6db4ca5b717c3368e64b77ba4a612c02704c1a531334331b5b219ecc7aa6949b60158bb8a217a29ad91ba25eb66e680ead563ec23d46a2397fd8ab0e80fb8966445c21df87ebd83e23e5546091c26cb67685468b27413b082cd61dd71a1a2a981995e698af3d077a2974386e2b499bb8d4fce00b66470abe7372188cba72da06be669b4b50f7b8347a507de9df9cc048ccea4832d4471e6015b867380dee30a749dd8d188cdae60e9a4de4c970bdb3afd4662a98f9fbcb8adb7ea923fb3dca7cf7b3eb2436cba186f1d8e98a45ef5424bdf9b25e0fe42cfcc2f0d740fbaba9343dd11b4c8eb1b9ca4829a0d1c9da6288fcf45d63c9094744b0af8d4f69125bb7d699e73c75e544d504cc1792b719938100d5462a6e3d808cd27cff09e4b162f6f1c2deab70128f69e87428b67e5a54239f99ae0b5660c1cc2359054bd50e8d42b9ab241fe000f3fbc36e2536301ce1ad0b5f2b46e865e5ecf40df3f4c03dd9b0b0b1790f0aa206770c89ecbbb9cc97e684c5ba300bb3045d4e5e34aef1135f5c344a220ae46d24d539c808f837b1d51d4273303a52d9e9952c13c8d1977b1815092ba45d122329b05a3290a32ebcf50002a7f20dc69636978030abb0f3066bbe35e849f91d477b903616d8664575c81fa85754bcd102ed87bc91cb4b60abb5717cac05402dea2d13c5e9a592fd349d7f4b5b269dde5364af8280ea34b417d4b784644131e06ea08c06b1dd74a67b45c55ec58ca8f66501f1a8f78da15bd384c3fe18ad8641d56ec9d0e991ff03d097e61b54efcd104b1d7c2557562e5a7eb59af6a0030d7b2af917334e360338a5216e9558c27b46607f2ccea540879782ca5f51d5aaacc32bcedc287bb83e65ec305a0ccb048c333dcd61a8ab5657625e5807fc108e5c57be5ded68e0bcfb1d69120cb2631c5f519696a4ade4d699e3c12819797442c8262b080d7a80846a93f4319e9a4fb6cb9e4d3b56867809bacd59550ea5f930a13ade00601bc8aed6fa9ebf30ab25f3a0302805ef025ea392e91f7c867643a2a5a4894767e82a8b9ae820e4726bb4dee9974c5a32cc2d11b3712ddbd75cd863a378c461feed775a5ae277b7b92daefd3b2dabf97c0aafd5c8b260e84d7939f9b36497fbf3da9281d380b00832cda076ad6a6ed221baa83a9d9aad04d5c736a17e8eca055595d6292008cd07b29f4403cc06b26fb9c6c09d9f15845cf8087c8538509b3583f8e637f7912b03db24a80008da43b891591775acffc8e3221cdb6684aec2a7a5d5c151c4b1b671f791aa1bd4cd197a71367e2c81f99aabdba7d672fc5045825a02d32b06a6c57e3378a4cb3b2e1c180c1b7e8544986db4e250134eb16da4c437e07333c377654fe9d450393c644f2b4ebe4067afea59eaf38add20d81d54fd4fa71b46eb44be3ccef9b68e058f8e2e738bb0fc23060035edae0011f10cc0fcb4656cd04070663dee7f5ed62a39bf5bf23f99284d615e25ed9167981a82994c2f92d3162b3e7a7080a4dde6cac6522fa89595ede27f462184dec2f0a4978772980b503b27c2282c5020edd48fc1e37997e6800aed37dd848c16d085e42aa74e666b9445341a6b59abcd85257bad629cee8b868793db15ff01f3d22e41ee390d998afb16897d97befe870ca886dfbc3edd0d3befbc337751789794b7870fb630bdcf7c7165372b0941247a51c96cdf72510f435ab2997124d01913418e66fce83077c3bceb20d8b7b1ad64af81ff2b067ce336ca9621df6d4bfa52ac80eab22c843f7b3b75090c66ad56972c727eb3f9ab247da52abc7cc7a6433c7ea430879b98f4001b801747aed03d64cba04e3817833c7f179da9c574d3d7a00001083a1f77bade7022dc209ed1139517d83298885e8e4675ff3abaf0f6d447739b541dca17d3213", 0x1}, 0x20) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000140)=[0x5, 0x4], 0x2, 0x5, 0x200000000, 0x9497, 0x80d9, 0x3, {0x3f, 0xffffffff, 0x3, 0x8, 0x9, 0x1000000000, 0x1, 0x3ff, 0x9, 0x5, 0x6, 0x1, 0x7ff, 0xce02, "d99a531bae56258f46673a416e570ea9014043dccfca8c3de18b98d3034cd434"}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:27 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xf47}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0x3, 0x2000000000000009, 0x2, 0x1, r0, 0x4000000, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:27 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000002c0)='_', &(0x7f0000000140)="2c3d0a706a76ecfd74d63d19921ef45dc4252ff2408ebdb70c5754fdbc60b84cb53421911663537b9c18ec9cffde7f1d6cd95b6b0000000000000000000000000053ff255e6ea4e5ca453c0dc44dbfcc2b6f414b55e3f04156d6fbb3204afdb7c0db4ca4d21bbff758c2b032ff33591ee95f0bc7fb4ebe4dbc65a8", 0xa55cb2958310ed72}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:27 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x1, 0x208000000000000a, 0x1, 0x1, 0x1, 0xfffffffffffffffd, [], r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000640)=0x3) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/dev/net/tun\x00', 0x24200, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000680)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:28 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xdc05, 0x3, @loopback}, 0x1c) 09:46:28 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x71399, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @loopback}, 0x200, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)='dummy0\x00', 0x0, 0x3f, 0x6956}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000)='\n', &(0x7f0000000140)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x269) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [], @multicast2}, 0x80000000000}, @in6={0xa, 0x4e21, 0x9, @local, 0x4}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}], 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000080)=[{}, {0x0, 0xffffffff}], 0x2) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000540)=""/194) preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r5, &(0x7f00000017c0), 0x1b4, 0x500000000000000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r5, &(0x7f00000003c0)="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", &(0x7f00000004c0)=""/22}, 0x18) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)=0x0) syz_open_procfs(r6, &(0x7f0000000280)='net/snmp\x00') r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r7, &(0x7f00000017c0), 0x1b4, 0x500000000000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000040)="e66d77e0029333be0c00f41812e9e732da2c13350e326d0ac60a772a26f5f1995a053d6e003ea00c754522a82d0cfdb020b218995b2cb734ab61901e14dc31e92e9736a5956f0d1234", &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:28 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x1f00}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:29 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4de, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:29 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfc00, 0x3, @loopback}, 0x1c) 09:46:29 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xa00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000280)=""/141) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000000340)="08bb390b11ac9641ce2a0272f13b25f01c88b14a66df2d22baf30efa50c2858b95cdc3b00a703c1b4ad7a0255bbcbea5decdc55b4d249edd480cac77f554579906790f86a2d86b313e497b773008354b0345d9cd7fcba65c4d5822d2410aec5f90b8437a9dabfa93ea09a8eee5d2ac7c2f9928bf9ae63cf452e6c458dda310308ce318740fc195b3f9592e1f1a69c6b30cc14d5836566e7272c25700"/167}, 0x20) 09:46:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) getpid() bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$KDADDIO(r1, 0x4b34, 0x0) 09:46:29 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x103000, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="1090ae90348f8663fb9956220113002a0e502f998dd6ba1cfca64a8847f7ef8bb73dbb90b4d878ecbda63c597217b904157ac48f9dc511b6fdd2db34e01c384e1fe396b725217db352f36836603a816168252e012f65aba4201f1f234e83198eeb0ce754ee72265e9f456f234c5b6bac52a7e57464dd6d2346318a6c4670d26c9323080ed202949065708613029843f9316b427a86b67d68bf5cc1f9485204e8d2315b8800920ce0bbb5c6484e00e7e6825229872d457095b7545ff27f9fb3f9d852bd4168c681f2a7784dc7478ac0da23289809", 0xd4}, {&(0x7f0000000380)="79e11216627bbee9dbf40d8efbd4a25779401939713b698234b3ffdecac7491e0177e3be900f283ec45d174d2abaa22d8fa87b0b57ea467b508379003d07843d38676f01608021bf30cdb5bbcac4421373a9989e8e57e4daccf4e3e0ea0716c4b173a36e8fbce04144b31679d16a603af5c74adbfe313199d0ede0fcb2716ab71b7592a6e4e87b102ef97e5680bb3f963da3a7024cfc1830fcf7dafd721adb57721068feee11e548e3", 0xa9}, {&(0x7f0000000140)="bb2c96374ae3883749a00ea3268f5e012a72c97e378bcdc45affd44a5a98ad6b7708efbe1623bb65a23eeb3eb89ba1c2b17149fe10244861b95839eaceabc25b3ab33c17ec74437fca8579de63d50082ab6d4ad75d9f91411a00698f96f640da1d9a361ca19f8939c027e2be65825b796d", 0x71}, {&(0x7f0000000440)="39cc869f25de9f5497a427928e7f10072f31ae0daff3059144bab24744f79be4f163011a45f73780528c0a178e891ad3ed3f42e25f66c86588ec7c4112d9912d3dffbec1922a6490ced83c93cbb3f713b9cfe97702a1f6ebec27f2d2892fbae98dc9ac76993e1606a9609b703142f7cdb3b4cbb5a8f7e9a61e7f2918e457765b92e4ed2f4943eba3e73ab26bb24a92c714184dc17105caea5e5d22560f803d4d351cbfbd1865d85dc3092516274cf07dd02af30324958136b37fc7ae9bdcb393de3642deb426", 0xc6}], 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), &(0x7f0000000580)}, 0x20) [ 1377.133301][ T4532] validate_nla: 13 callbacks suppressed [ 1377.133310][ T4532] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:29 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) accept4$unix(r0, 0x0, &(0x7f0000000600), 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0xff, 0x5}]}, 0xc, 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x5c}, @window={0x3, 0x6}, @mss={0x2, 0x7}], 0x3) 09:46:29 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfe80, 0x3, @loopback}, 0x1c) [ 1377.431201][ T4539] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001000000000000000000efff0020", @ANYRES32=r5, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f310000"], 0x34}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, r1, 0x0, [], r5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40a02, 0x0) r8 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) recvmmsg(r8, &(0x7f0000004140)=[{{&(0x7f0000000300)=@pptp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/153, 0x99}, {&(0x7f0000000440)=""/120, 0xd4}], 0x2, &(0x7f0000000500)=""/201, 0xc9}, 0x1000}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/71, 0x47}], 0x2, &(0x7f00000007c0)=""/189, 0xbd}, 0x1a5}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000900)=""/184, 0xb8}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4}, 0x9}, {{&(0x7f0000002a40)=@nfc, 0x80, &(0x7f0000003b00)=[{&(0x7f0000002ac0)=""/4096, 0xed1}, {&(0x7f0000003ac0)=""/14, 0xe}], 0x2}, 0xffffffffffff9531}, {{&(0x7f0000003b40)=@isdn, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003bc0)}, {&(0x7f0000003c00)=""/56, 0x38}, {&(0x7f0000003c40)=""/233, 0xe9}, {&(0x7f0000003d40)=""/212, 0xd4}], 0x4}, 0x2}, {{&(0x7f0000003e80)=@nfc_llcp, 0x80, &(0x7f0000004040)=[{&(0x7f0000003f00)=""/238, 0xee}, {&(0x7f0000004000)=""/61, 0x3d}], 0x2, &(0x7f0000004080)=""/145, 0x91}}], 0x6, 0x62, 0x0) write$capi20_data(r7, &(0x7f0000000140)={{0x10, 0x7fffffff, 0x4, 0x81, 0x8, 0x6}, 0x53, "a176a98812412bd53cc0320b60b8f3cd7db1db588412780b1c194808009d0e5721e1ecc18c397b4b81935cf89a97f7bdb671737d23ceb2477f97745112e140a7bf59684509462af50255d16acd8c85f4c78878"}, 0x65) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r6, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1377.659399][ T4543] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1377.823362][ T4546] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1377.952531][ T4554] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:30 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x7139a, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000280)="7dc2f5e3c6886eb95ccf18e0f17c933cf21674cc43b6a88f449a178c775b3d689efb66c68de760fe1a3de34fdee9fa1165327a673783eb856987750015220681ad6080991e6e4ef0e72fce93b76ebe068b79f9a9478c90930b9845f540a425d1cfbee44ed1fcdc24e06f5e2822591deb7f172dd9d4acc18789a0ca7494cda0d32ae2321a541542669098cf2c0be39636bc76ee8c75251a073fc665b9d94a5ae568043573de290fe3fa"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:30 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x2000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1378.103350][ T4540] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:31 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4df, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:31 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfec0, 0x3, @loopback}, 0x1c) [ 1378.350555][ T4544] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:46:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) socket$l2tp(0x18, 0x1, 0x1) 09:46:31 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xb00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1378.532642][ T4599] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000280)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) [ 1378.712806][ T4615] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1378.727074][ T4615] CPU: 1 PID: 4615 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 1378.734657][ T4615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.744812][ T4615] Call Trace: [ 1378.748132][ T4615] dump_stack+0x172/0x1f0 [ 1378.752488][ T4615] dump_header+0x10b/0x82d [ 1378.756929][ T4615] ? oom_kill_process+0x94/0x3f0 [ 1378.762102][ T4615] oom_kill_process.cold+0x10/0x15 [ 1378.767310][ T4615] out_of_memory+0x79a/0x12c0 [ 1378.772225][ T4615] ? lock_downgrade+0x920/0x920 [ 1378.777239][ T4615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1378.783492][ T4615] ? oom_killer_disable+0x280/0x280 [ 1378.788792][ T4615] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1378.794462][ T4615] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1378.800320][ T4615] ? do_raw_spin_unlock+0x57/0x270 [ 1378.805623][ T4615] ? _raw_spin_unlock+0x2d/0x50 [ 1378.810483][ T4615] try_charge+0xf4b/0x1440 [ 1378.814996][ T4615] ? perf_trace_lock_acquire+0x80/0x530 [ 1378.820675][ T4615] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1378.826384][ T4615] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1378.832074][ T4615] ? __kasan_check_read+0x11/0x20 [ 1378.837129][ T4615] ? lock_downgrade+0x920/0x920 [ 1378.841988][ T4615] ? percpu_ref_tryget_live+0x111/0x290 [ 1378.847542][ T4615] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1378.853030][ T4615] ? memcg_kmem_put_cache+0x50/0x50 [ 1378.858237][ T4615] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1378.863882][ T4615] __memcg_kmem_charge+0x13a/0x3a0 [ 1378.869002][ T4615] __alloc_pages_nodemask+0x4f4/0x900 [ 1378.874382][ T4615] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1378.880108][ T4615] ? percpu_ref_put_many+0xb6/0x190 [ 1378.885315][ T4615] ? trace_hardirqs_on+0x67/0x240 [ 1378.890348][ T4615] ? __kasan_check_read+0x11/0x20 [ 1378.895380][ T4615] copy_process+0x3f8/0x67e0 [ 1378.899980][ T4615] ? kvm_clock_read+0x18/0x30 [ 1378.904661][ T4615] ? lock_downgrade+0x920/0x920 [ 1378.909640][ T4615] ? __cleanup_sighand+0x60/0x60 [ 1378.914578][ T4615] ? lock_downgrade+0x920/0x920 [ 1378.919449][ T4615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1378.925692][ T4615] ? debug_smp_processor_id+0x3c/0x214 [ 1378.931155][ T4615] _do_fork+0x146/0xfa0 [ 1378.935320][ T4615] ? __lockdep_free_key_range+0x120/0x120 [ 1378.941046][ T4615] ? copy_init_mm+0x20/0x20 [ 1378.945562][ T4615] ? percpu_ref_put_many+0x94/0x190 [ 1378.950761][ T4615] ? __kasan_check_read+0x11/0x20 [ 1378.955782][ T4615] ? blkcg_maybe_throttle_current+0x5fe/0x1030 [ 1378.961929][ T4615] __x64_sys_clone+0x18d/0x250 [ 1378.966677][ T4615] ? __blkcg_punt_bio_submit+0x1e0/0x1e0 [ 1378.972295][ T4615] ? __ia32_sys_vfork+0xc0/0xc0 [ 1378.977172][ T4615] ? trace_hardirqs_off_caller+0x65/0x230 [ 1378.982876][ T4615] ? trace_hardirqs_on+0x67/0x240 [ 1378.987884][ T4615] do_syscall_64+0xfa/0x760 [ 1378.992370][ T4615] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1378.998240][ T4615] RIP: 0033:0x45c2b9 [ 1379.002126][ T4615] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1379.021716][ T4615] RSP: 002b:0000000000a6fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1379.030107][ T4615] RAX: ffffffffffffffda RBX: 00007f1c02d90700 RCX: 000000000045c2b9 [ 1379.038073][ T4615] RDX: 00007f1c02d909d0 RSI: 00007f1c02d8fdb0 RDI: 00000000003d0f00 [ 1379.046025][ T4615] RBP: 0000000000a6fce0 R08: 00007f1c02d90700 R09: 00007f1c02d90700 [ 1379.053978][ T4615] R10: 00007f1c02d909d0 R11: 0000000000000202 R12: 0000000000000000 09:46:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x181000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000140)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c57540d1f27ab0fc764f49ffdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1379.061929][ T4615] R13: 0000000000a6fb7f R14: 00007f1c02d909c0 R15: 000000000075bfd4 [ 1379.176363][ T4615] memory: usage 307172kB, limit 307200kB, failcnt 111 [ 1379.183386][ T4615] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1379.197011][ T4615] Memory cgroup stats for /syz2: [ 1379.197105][ T4615] anon 166129664 [ 1379.197105][ T4615] file 126976 [ 1379.197105][ T4615] kernel_stack 3801088 [ 1379.197105][ T4615] slab 127520768 [ 1379.197105][ T4615] sock 4096 [ 1379.197105][ T4615] shmem 0 [ 1379.197105][ T4615] file_mapped 0 [ 1379.197105][ T4615] file_dirty 0 [ 1379.197105][ T4615] file_writeback 0 [ 1379.197105][ T4615] anon_thp 153092096 [ 1379.197105][ T4615] inactive_anon 0 [ 1379.197105][ T4615] active_anon 166125568 [ 1379.197105][ T4615] inactive_file 135168 [ 1379.197105][ T4615] active_file 0 [ 1379.197105][ T4615] unevictable 0 [ 1379.197105][ T4615] slab_reclaimable 120029184 [ 1379.197105][ T4615] slab_unreclaimable 7491584 [ 1379.197105][ T4615] pgfault 85536 [ 1379.197105][ T4615] pgmajfault 66 [ 1379.197105][ T4615] workingset_refault 0 [ 1379.197105][ T4615] workingset_activate 0 09:46:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000140)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1379.197105][ T4615] workingset_nodereclaim 0 [ 1379.197105][ T4615] pgrefill 0 [ 1379.197105][ T4615] pgscan 99 [ 1379.197105][ T4615] pgsteal 0 [ 1379.197105][ T4615] pgactivate 0 09:46:32 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xff00, 0x3, @loopback}, 0x1c) [ 1379.316062][ T4615] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=26812,uid=0 09:46:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) vmsplice(r1, &(0x7f0000000a80)=[{&(0x7f0000000700)="3b11521a0c2fed91f2d44728787a192e1db834c2330846e997b5b6463c5f09d2f53007d2e90b9c7f3418d3bb3c23f1d60c74d7da8354b00606dcc78efbb8afecc1c40565d4ef0428f3b0ef051a984f2e7cb0673f94e74e4f4e8816f2d078227b9c0f6c065665ba62096294b3d93cfbd3ef3b314cf8da30f73dd7a1f8cbeed1dacff0a70349c83e722c0a4baaef8593297933f6e9574720", 0x97}, {&(0x7f00000007c0)="94eb90d349d4c8e01f14e37f389fa11b67527977bd161e0fcd88b8c8de7d65317c2b8be0c921122e43287ee2c3f57492d399c0df9355bfde9e9c883ac9e722267ff55488e68bdd660659779655510423bddee71628287bd529e1dd4784ae390dcefdbbab57af1946825a52a92a68af992fb533b066e322129b6dfe185b3a7408b33a36984ffaba48996d8d5a350c1e850daf92ff842b9886e31218f27c639df2cecfd7", 0xa3}, {&(0x7f0000000880)="96cb650e0b29506eb1edbfcee08f1610d36d1271c63f8f830cce46e573aa59a116e6786ba16aef01734ddc943b14f54c39257f6179218ce894ddc8a74afd176eeaf6955158a9db271da3d76f891a0c165b49ea684e08d945e39e6d1c72595102a3e479defce0d61878d22105bb2e1e4b8f55f09d3e0b44c6890307aa23f2023e677cc99f893f", 0x86}, {&(0x7f0000000940)="f65646974e95f85c385cf95e9da29e917b3ef2776c2a65895f33ab7e4c97970570bff68ba1cc10403f93b4b82fbc54f6d90b0dd8ba972244a3b30fc014b258843c662543cc82a6f2b248ff837e82e5ed5fb3b37a2b585f9ef81dae137b0ebef8a6b658078ee4ab1e49ab78d8ea7a915ce471ddfc7853802b789379a738aa79d660783ac7999311032dc0655348e745f30e227565d826522125871ea1b3d0815854f7be608cd9765a4ba9ab74e75387b62a94", 0xb2}, {&(0x7f0000000a00)="e6ea7c40f7696c15a1c101689905cb3bd424e3c1d018a608afe203e432d3283807cddb61afbe575331ccf6d3a488b5c187cdb30b240ec54b3025a18fc5f17ddea9bb5bfb", 0x44}, {&(0x7f0000000480)="f96e", 0x2}], 0x6, 0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x0, 0x40a00) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000500)={0x6, @pix={0x1, 0x1, 0x20493859, 0x2, 0x20, 0xbf, 0x3, 0x4148, 0x2, 0x0, 0x3, 0x1}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r3 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x2d2, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f00000003c0)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000440)=@generic={0x3, 0x4, 0x7}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x48080, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') epoll_wait(r5, &(0x7f00000004c0)=[{}, {}], 0x2, 0x8ec) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r6, @ANYBLOB="00012bbd7000fddbdf250e000000000002000000030032780000befc030044000200080008000900000008000d000100000008000500ffffff7f00000700018000000800020000050000080008000180000032fd09000000008000000e004e2000005b030500ff0000000800000400030040000100080009002c000000080001000200000008000800a10e0000080008000300000000000200000000000c0007000300000000000000080009004b00"/190], 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x8810) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x90, r6, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x90}}, 0x810) [ 1379.400971][ T4592] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1379.478456][ T4615] Memory cgroup out of memory: Killed process 26812 (syz-executor.2) total-vm:72708kB, anon-rss:4260kB, file-rss:35804kB, shmem-rss:0kB [ 1379.502620][ T1061] oom_reaper: reaped process 26812 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1379.619883][ T4609] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:32 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x7139b, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:32 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x3e00}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:32 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x100000, 0x3, @loopback}, 0x1c) 09:46:33 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4e0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:33 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xc00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000600)) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r4, 0x6}, &(0x7f00000002c0)=0x8) 09:46:33 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1000000, 0x3, @loopback}, 0x1c) 09:46:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x50200, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x3, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140)="bd1ccafa888afc99950e5790307fcd23fce560b0b7969ad277303c04794de96c74dc0ab7d13567d39b91a3133d75adb5e5ce6a6770263fc3745600b60bbf7412a343bc66e929344df85bccf2dfc0d18c443dd4eec3e246c1f51c2a127898692248cd7fdd8552c90c6a2435e34275d6526b9ffdf4b87d8d1d0fdc5b", &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x7, 0x1, 0x1ff, 0x80000001, 0x180, r0, 0x1, [], 0x0, r1, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000340)="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", &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x3b8) connect$vsock_dgram(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="afaa976496e11d97f319d27aed5c46a49071a93d4431ae3bf9c6f6d081b786042de7ebcf5f2b96064b5abf7c1fe962c1c16767f3d05981c2e06c362d43354bdc755979dc0057d3b332dad6e6e90d25c53b4eaea496a3420f64af545855f56d92cafbe80adc78cc4b166d2dfe572d7669846910ece4957de01d3a402f54e53334acdd4a0ddcd232da8d85976da54cd3b379bf64b00c7e9896faa8b3b17c6cc8c67a04c82583d8352f990ac0a5ee685b7d4e3ba28a14addcb4f4ffdd53402399a763dc5fad6a0f", &(0x7f0000000180)}, 0x20) 09:46:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0)="4d3a1fda73c4cfb30ab74f346cf0", &(0x7f0000000400), 0x3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:34 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x7139c, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:34 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x3f00}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x80000000, 0x1, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000280)="76aced3839640b8f2cd41581f054d5233231f8ba323cc2303c8272a59879c24c492b825a69b9637de2cbb34a4b712cb0a555c0d7ed4219451c1dc7898fa16e28fbe225bc5647dbcfa9943f14f61208c69664be707636db08e1a84422ddf80374fd77d941093e92da528655ced3b75a0b19b33019e47d3eb575b459fb60ef4f3701b5619390fc7a59b8972f66ac2965"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:34 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4e1, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) [ 1382.197353][ T4672] validate_nla: 12 callbacks suppressed [ 1382.197362][ T4672] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:46:35 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xd00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:35 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2000000, 0x3, @loopback}, 0x1c) 09:46:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)=0x1b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/n?\x00\x00\x00pv4/\xff\xff/\x89loppy_tcp\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000400)={r5, 0x6}) preadv(r3, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000300)={0x3, 0x4, 0xeb3d}) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000180)=0x78) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000340)={0x80, 0x6, 0x1ff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r6, &(0x7f00000017c0), 0x1b4, 0x500000000000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1382.368894][ T4720] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2000, 0x0) accept4(r1, 0x0, &(0x7f0000000140), 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180)="5cfbe5340009a203bbd9d73856da7e67632b088aeebd90ab07328124fef78c1f059b3697b6844a44f7aa540a7edb7a0ba3bf5c070cb632", &(0x7f0000000280)="81404c1335a7cbee579dab88ca9766241975792ff339c79e76f50212648efffea7f0653185606a1206b9ccd9fcd971cf61e3a4a9e795273b250f3e157ed1acf2589c0c20b11ca34a3892c2c6e7bb652b34878c3e79255caa705a640a4a2b4576f91c56cf8767522a8ed2ac32b6a1544a903d9526da749fc5d5bd98a9981a8a784ba098ebc3bc8814bb6a1ff31abcb8fac625d1ed24cb0a381717c1df36b8141177c2bf55b43a1a8a495abbee1283508f", 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000400)={0x1, 0xfd62a565cfb0d3c1, &(0x7f0000000300)="bef0968618f5afdad078ba1d9b945412d4101959d7c307d02ca07db00f0eb1aa0fe8cfccc3634ac9e8879ce5d6fd91d8d3ed45075687625ac3ba02ed0efc293bf8119388bd42a98196b87649f34c2aae914a6c63fa4abfece34645fab775e94567fb6fe24684d10b7ab416786dce4be90250672cfe8f735806f7a384600acbe5afd5ed8d08b8c80782a05f8dc4581e002c854dd777cf07d9617cd9f898774d17cbb6ff364488d891c3f5b32233427e6e024a2946869da32cd4b0631ccad126ca0a78e276526874989ef563cd597fd93da2bb0db4e7e46cb93d2639887e42e4278385c7bdb3668dcdd549109b47303ce82ea1fbbdc880bc97", {0x20, 0x6e5, 0x31324d4e, 0xa2104e69ae6f2c2d, 0x9, 0x0, 0x7, 0x5}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="8871900924e732b199d474ab0022c24a5e82093c60549e8bb30a113de61ecd2b841aa612", &(0x7f0000000140)="60542873a483f5c246fb7e154657fa6e4cc305000000000000006b0e052bf24d6200e38bcc75f043e8663175e1ef1977708e6c057b72a5ac3da4691eb473ae00000b00000000000000bf4c44cb86994676e21847f6000000", 0x6}, 0xffffffffffffffe9) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) 09:46:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000000c0)=0x5000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x8000000003, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1382.935336][ T4731] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1383.098494][ T4737] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1383.221073][ T4745] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1383.386803][ T4721] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:36 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x7139d, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1383.542052][ T4734] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:36 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x4000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1383.700514][ T4738] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:36 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4e2, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:36 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3000000, 0x3, @loopback}, 0x1c) 09:46:36 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000002}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8001, 0x0) accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x1000) r2 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x3eb) r3 = dup(r2) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000000c0)) fchdir(r2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1383.908820][ T4782] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000280)="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", &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180), &(0x7f0000000600)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000140)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000600)={'raw\x00', 0x62, "3fcd5e533e98c25d3741b0b1369ac99b04d3ff157d02b6c66d2a73bfbf9f011bb7a0af73008892c6c333185013a506a757123b377d50a730a4fd727e77c9a3f48339c3578754e0a834620041289a982723f69cf5489c8c3acef80e2035fc9c09a5a6"}, &(0x7f0000000140)=0x86) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000180), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r3 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) pread64(r3, &(0x7f0000000280)=""/198, 0xc6, 0x0) 09:46:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) timer_create(0x6, &(0x7f0000000380)={0x0, 0x3f, 0x2, @thr={&(0x7f00000002c0)="329a805e", &(0x7f0000000300)="4c62137f4ccb9698f2d78521442e6a755152afd7a916ebf3791478ba6580b1e3860fba8227ddb5d2f9e94048239714ea442d076b905a8a3d005acb4181bfd544edadb52e9c6b1e042d331678cf1d273a6329fbba8029a699f387ea3043280a6a3e67f5d3802652d51ffe60252a0a953c40c08e7eaa62717b8ae6652bcab87f7f"}}, &(0x7f00000003c0)=0x0) timer_delete(r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c, 0x80800) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000280)=0x3, 0x4) 09:46:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000280)="9a3656a50100000084142b7d66e6709cf6db30120094ef0019593ab810156010dd56e2b1ed95d1d6a016ee0f8f41d88eae11045819e03c37be6377782fcde178e9bad8e9240d3bc7e7a1a491fe4ee33b36538085fad2818f5d911126c4a192afacef683150f04c85efc815c381eae239ce6cd4099f14cc176cbfa9bc3a979bc693548452269b3bd86823f26e79d0d7228e5cdbdd09bdacfc22de9ddd1ff9d6bc9189f774e9f0835344107c1413f13315376e254826deb32f4baf73046229bb48d9685bcd7a19b79450a29b2db39d85cdc78d9c813b2aceda3b", &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e0300000000000000b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1384.608599][ T4789] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:37 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x7139e, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:38 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x470f}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0)="c5aba1a1f6ea9ae9c11d6727248dbbb39e768a0de21609591738071c46c41e3fbeed92", &(0x7f0000000400)}, 0x20) lseek(r0, 0x0, 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x300, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) r2 = getpid() r3 = getpgrp(r2) getpgid(r3) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r3) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x500000000000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r4, 0x0, 0x1, &(0x7f0000000180)='\x00', 0xffffffffffffffff}, 0x30) r5 = getpid() getpgrp(r5) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000300)=0x1) sched_rr_get_interval(r5, &(0x7f0000000140)) 09:46:38 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4e3, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:38 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000, 0x3, @loopback}, 0x1c) 09:46:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xb, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:38 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000003}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x104, 0x2}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xf, 0x3, 0x2000000000000009, 0x2, 0x1, r0, 0x6}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) open(&(0x7f00000000c0)='.\x00', 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) 09:46:38 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x2, 0x2000000000000009, 0x2, 0x1, 0x1, 0xfffffffffffffffd}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000600)=0xfffffffffffffff8, 0x4) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f00000000c0)={0x72c}) 09:46:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000340)={&(0x7f0000000180), &(0x7f0000000280)=""/78, 0x4e}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8, 0x0) readahead(r2, 0x6, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:39 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x7139f, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:39 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x4800}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) 09:46:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) [ 1387.241223][ T4876] validate_nla: 13 callbacks suppressed [ 1387.241232][ T4876] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:40 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000000, 0x3, @loopback}, 0x1c) 09:46:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = syz_open_dev$sndpcmc(&(0x7f0000000740)='/dev/snd/pcmC#D#c\x00', 0x1, 0x4100) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180), 0x4}, 0x20) r2 = socket(0xa, 0x5, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x2, 0x800) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000640)=""/217) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000600)={0x800100f, 0x6}) r4 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) recvmmsg(r2, &(0x7f0000006140)=[{{&(0x7f0000000bc0)=@llc, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c40)=""/174, 0xae}, {&(0x7f0000000d00)=""/131, 0x83}, {&(0x7f0000000dc0)=""/145, 0x91}, {&(0x7f0000000840)=""/25, 0x19}, {&(0x7f0000000a00)=""/32, 0x20}], 0x5}, 0x9}, {{&(0x7f0000000f00)=@can, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000f80)=""/190, 0xbe}, {&(0x7f0000001040)=""/201, 0xc9}, {&(0x7f0000001140)=""/77, 0x4d}, {&(0x7f00000011c0)=""/235, 0xeb}], 0x4, &(0x7f0000001300)=""/4096, 0x1000}, 0xa5f}, {{&(0x7f0000002300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/197, 0xc5}, {&(0x7f0000002480)=""/183, 0xb7}, {&(0x7f0000002540)=""/242, 0xf2}, {&(0x7f0000002640)=""/148, 0x94}], 0x4}, 0x1ff}, {{&(0x7f0000002740)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003b40)=[{&(0x7f00000027c0)=""/8, 0x8}, {&(0x7f0000002800)=""/188, 0xbc}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/118, 0x76}, {&(0x7f0000003940)=""/198, 0xc6}, {&(0x7f0000003a40)=""/179, 0xb3}, {&(0x7f0000003b00)=""/43, 0x2b}], 0x7}, 0x9}, {{&(0x7f0000003bc0)=@caif=@dbg, 0x80, &(0x7f0000004140)=[{&(0x7f0000003c40)=""/133, 0x85}, {&(0x7f0000003d00)=""/24, 0x18}, {&(0x7f0000003d40)=""/44, 0x2c}, {&(0x7f0000003d80)=""/177, 0xb1}, {&(0x7f0000003e40)=""/15, 0xf}, {&(0x7f0000003e80)=""/83, 0x53}, {&(0x7f0000003f00)=""/194, 0xc2}, {&(0x7f0000004000)=""/173, 0xad}, {&(0x7f00000040c0)}, {&(0x7f0000004100)=""/58, 0x3a}], 0xa, &(0x7f0000004200)=""/228, 0xe4}, 0x4}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000004300)=""/28, 0x1c}, {&(0x7f0000004340)=""/104, 0x68}, {&(0x7f00000043c0)=""/76, 0x4c}, {&(0x7f0000004440)=""/187, 0xbb}, {&(0x7f0000004500)=""/117, 0x75}, {&(0x7f0000004580)=""/125, 0x7d}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/127, 0x7f}, {&(0x7f0000004740)=""/254, 0xfe}], 0x9, &(0x7f0000004900)=""/102, 0x66}, 0xffffffffffff8000}, {{&(0x7f0000004980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004a00)=""/11, 0xb}, {&(0x7f0000004a40)=""/72, 0x48}, {&(0x7f0000004ac0)=""/74, 0x4a}, {&(0x7f0000004b40)=""/13, 0xd}], 0x4}}, {{&(0x7f0000004bc0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000006040)=[{&(0x7f0000004c40)=""/215, 0xd7}, {&(0x7f0000004d40)=""/4096, 0x1000}, {&(0x7f0000005d40)=""/188, 0xbc}, {&(0x7f0000005e00)=""/240, 0xf0}, {&(0x7f0000005f00)=""/21, 0x15}, {&(0x7f0000005f40)=""/95, 0x5f}, {&(0x7f0000005fc0)=""/80, 0x50}], 0x7, &(0x7f00000060c0)=""/82, 0x52}, 0x3}], 0x8, 0x20, &(0x7f0000006340)={0x77359400}) r5 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r6 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x100, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r1, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR], @ANYBLOB="d884689958b99772d102832a237126ea60f80437ba46eba1fb9d6a5fd6fc5766e2f615c2ee9a7e73298a34c0bd86d0f606e62c1b3523a2eda070a109ed732c03c59213767414768ed1f7520bbd0ab3bc4e24ba98e102ccf360ffa08e47c8f52d5548f7e69526c7f2bf208de7f377052a9398d1ffff00005d8ee6e19ce96258cf054f1e1e397db23ef579baa2c85003779588955ad61239d796f82e00e316e86eca00e34bed0a2d9a0b2699be1d6fc4f10700000000000000eadc50", @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r0, @ANYRESDEC=r1, @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYBLOB="17bc4dd89b85d2aad25f6f6fd0ffa765fd013529ed5f74efce3a1f5296dce4647586b8cbd409d633887c489522ca2d4a8e02ff63be8f6f97261745b0a61d062902b9258447687442012df57180d614bd5ee8446293809ea389bb216f6f1038ed64d35cdbd2d1bd93889826bbf4e6f75bbb65ece82d2c41ae0a38a62e4852da6ce8c8d3c1f0235da113b1e3f58f963dd820dad188c89d39f60cf7be6cb0dc3c2878ef92dd3839d8d0be3e6bc4c40191aea09f179b2f26a49a780bc9edd351fc61f88422ac8ad60ba74bf6d6f258d1408cbfb77111", @ANYRESHEX, @ANYPTR, @ANYRES64=r4, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="29ebc7f99d2cb64973d4400a6fb22ec86d2b1287", @ANYRESHEX, @ANYPTR64], @ANYRESOCT=r5, @ANYPTR, @ANYRES16, @ANYRESOCT=r2, @ANYRES32=r6, @ANYPTR=&(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYPTR]], @ANYRESDEC, @ANYRESOCT=r4, @ANYRES64]}, 0x178) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000140)) 09:46:40 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000004}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 09:46:40 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4e4, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) [ 1387.402546][ T4911] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x1, 0x1}, 0x2c) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x20000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='_', &(0x7f0000000040)="2c10900562933d0a706a76ecfd74d63d19921ef45dc4052ff2408e9db70c5754fdbc60b84cb53421911663533b9c18ec9cffde7f1d64d95b6b55599ed2c434614e"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xe, 0x5, 0x9, 0x9, 0x32, 0x1, 0x9, [], 0x0, r1, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 09:46:40 executing program 4: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x400000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1387.856515][ T4921] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:40 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000010000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000200000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x4c00}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1388.030784][ T4929] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:46:40 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x6000000, 0x3, @loopback}, 0x1c) [ 1388.389394][ T4931] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 1388.533265][ T4912] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 09:46:41 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x713a0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1388.672460][ T4953] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 09:46:41 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x30000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) [ 1388.832047][ T4962] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 09:46:41 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x7000000, 0x3, @loopback}, 0x1c) [ 1389.075144][ T4934] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 09:46:41 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000005}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 1389.238217][ T4938] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 09:46:42 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4800, 0x7c4e5, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) 09:46:42 executing program 4 (fault-call:0 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x393, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1389.920112][ T4999] FAULT_INJECTION: forcing a failure. [ 1389.920112][ T4999] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.942012][ T4999] CPU: 0 PID: 4999 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1389.949515][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1389.959577][ T4999] Call Trace: [ 1389.962879][ T4999] dump_stack+0x172/0x1f0 [ 1389.967210][ T4999] should_fail.cold+0xa/0x15 [ 1389.967228][ T4999] ? fault_create_debugfs_attr+0x180/0x180 [ 1389.967242][ T4999] ? page_to_nid.part.0+0x20/0x20 [ 1389.967256][ T4999] ? ___might_sleep+0x163/0x280 [ 1389.967273][ T4999] __should_failslab+0x121/0x190 [ 1389.967287][ T4999] should_failslab+0x9/0x14 [ 1389.967305][ T4999] kmem_cache_alloc_trace+0x2d3/0x790 [ 1389.977680][ T4999] ? ptrace_may_access+0x3b/0x60 [ 1389.977698][ T4999] perf_event_alloc.part.0+0xc0/0x33d0 [ 1389.977710][ T4999] ? lock_downgrade+0x920/0x920 09:46:42 executing program 4 (fault-call:0 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x393, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1389.977729][ T4999] ? rwlock_bug.part.0+0x90/0x90 [ 1389.977745][ T4999] ? list_del_event+0x7f0/0x7f0 [ 1389.977760][ T4999] ? __kasan_check_read+0x11/0x20 [ 1389.977773][ T4999] ? do_raw_spin_unlock+0x57/0x270 [ 1389.977794][ T4999] __do_sys_perf_event_open+0x989/0x2d50 [ 1389.977813][ T4999] ? __kasan_check_write+0x14/0x20 [ 1389.987678][ T4999] ? perf_event_set_output+0x4e0/0x4e0 [ 1390.007620][ T4999] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1390.007642][ T4999] ? __ia32_sys_read+0xb0/0xb0 [ 1390.007655][ T4999] ? switch_fpu_return+0x1fa/0x4f0 [ 1390.007672][ T4999] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1390.007690][ T4999] __x64_sys_perf_event_open+0xbe/0x150 [ 1390.007711][ T4999] do_syscall_64+0xfa/0x760 [ 1390.017988][ T4999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1390.017999][ T4999] RIP: 0033:0x4598e9 [ 1390.018015][ T4999] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1390.018022][ T4999] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1390.018034][ T4999] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 [ 1390.018042][ T4999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 1390.018050][ T4999] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1390.018059][ T4999] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f27c6ba46d4 [ 1390.018067][ T4999] R13: 00000000004c671d R14: 00000000004db7d8 R15: 0000000000000003 [ 1390.143384][ T5002] FAULT_INJECTION: forcing a failure. 09:46:42 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8000000, 0x3, @loopback}, 0x1c) [ 1390.143384][ T5002] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.195673][ T5002] CPU: 0 PID: 5002 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1390.203169][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1390.203175][ T5002] Call Trace: [ 1390.203196][ T5002] dump_stack+0x172/0x1f0 [ 1390.203219][ T5002] should_fail.cold+0xa/0x15 [ 1390.220943][ T5002] ? tracepoint_probe_register_prio+0x36/0x790 [ 1390.220964][ T5002] ? fault_create_debugfs_attr+0x180/0x180 [ 1390.220982][ T5002] ? page_to_nid.part.0+0x20/0x20 [ 1390.231689][ T5002] ? ___might_sleep+0x163/0x280 [ 1390.231708][ T5002] __should_failslab+0x121/0x190 [ 1390.231728][ T5002] should_failslab+0x9/0x14 [ 1390.242513][ T5002] __kmalloc+0x2e0/0x770 [ 1390.252255][ T5002] ? pcpu_alloc+0x144/0x1350 [ 1390.252277][ T5002] ? tracepoint_probe_register_prio+0x340/0x790 [ 1390.252297][ T5002] tracepoint_probe_register_prio+0x340/0x790 [ 1390.261007][ T5002] ? pcpu_create_chunk+0x7f0/0x7f0 [ 1390.271804][ T5002] ? perf_trace_block_bio_remap+0x700/0x700 [ 1390.271820][ T5002] ? perf_trace_block_bio_remap+0x700/0x700 [ 1390.271835][ T5002] tracepoint_probe_register+0x2b/0x40 [ 1390.271854][ T5002] trace_event_reg+0x21b/0x350 [ 1390.283023][ T5002] perf_trace_event_init+0x4f3/0x980 [ 1390.283044][ T5002] perf_trace_init+0x189/0x250 [ 1390.283062][ T5002] perf_tp_event_init+0xa6/0x120 [ 1390.294826][ T5002] perf_try_init_event+0x135/0x590 [ 1390.294845][ T5002] perf_event_alloc.part.0+0x1033/0x33d0 [ 1390.294859][ T5002] ? lock_downgrade+0x920/0x920 [ 1390.294877][ T5002] ? list_del_event+0x7f0/0x7f0 [ 1390.294891][ T5002] ? __kasan_check_read+0x11/0x20 [ 1390.294905][ T5002] ? do_raw_spin_unlock+0x57/0x270 [ 1390.294926][ T5002] __do_sys_perf_event_open+0x989/0x2d50 [ 1390.294948][ T5002] ? __kasan_check_write+0x14/0x20 [ 1390.305226][ T5002] ? perf_event_set_output+0x4e0/0x4e0 [ 1390.305248][ T5002] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1390.315356][ T5002] ? __ia32_sys_read+0xb0/0xb0 [ 1390.315371][ T5002] ? switch_fpu_return+0x1fa/0x4f0 [ 1390.315390][ T5002] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1390.315408][ T5002] __x64_sys_perf_event_open+0xbe/0x150 [ 1390.315428][ T5002] do_syscall_64+0xfa/0x760 [ 1390.315447][ T5002] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1390.325529][ T5002] RIP: 0033:0x4598e9 09:46:43 executing program 3: r0 = socket(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x9000000, 0x3, @loopback}, 0x1c) [ 1390.325545][ T5002] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1390.325553][ T5002] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1390.325567][ T5002] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 [ 1390.325576][ T5002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 1390.325584][ T5002] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1390.325593][ T5002] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f27c6ba46d4 09:46:43 executing program 4 (fault-call:0 fault-nth:2): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x393, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1390.325601][ T5002] R13: 00000000004c671d R14: 00000000004db7d8 R15: 0000000000000003 09:46:43 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x6000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000840)={0x3f, 0x8001, 0x0, 'queue1\x00'}) socket(0xa, 0x5, 0x0) [ 1390.553268][ T5015] FAULT_INJECTION: forcing a failure. [ 1390.553268][ T5015] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.611924][ T5015] CPU: 1 PID: 5015 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1390.619424][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1390.629485][ T5015] Call Trace: [ 1390.632875][ T5015] dump_stack+0x172/0x1f0 [ 1390.637227][ T5015] should_fail.cold+0xa/0x15 [ 1390.641832][ T5015] ? tracepoint_probe_unregister+0x2f/0x6c0 [ 1390.647744][ T5015] ? fault_create_debugfs_attr+0x180/0x180 [ 1390.653562][ T5015] ? page_to_nid.part.0+0x20/0x20 [ 1390.658594][ T5015] ? ___might_sleep+0x163/0x280 [ 1390.663454][ T5015] __should_failslab+0x121/0x190 [ 1390.668401][ T5015] should_failslab+0x9/0x14 [ 1390.672910][ T5015] __kmalloc+0x2e0/0x770 [ 1390.677160][ T5015] ? tracepoint_probe_unregister+0x1cc/0x6c0 [ 1390.683148][ T5015] tracepoint_probe_unregister+0x1cc/0x6c0 [ 1390.688954][ T5015] ? perf_trace_block_bio_remap+0x700/0x700 [ 1390.688973][ T5015] trace_event_reg+0x189/0x350 [ 1390.699607][ T5015] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1390.699627][ T5015] perf_trace_event_unreg.isra.0+0xb6/0x220 [ 1390.699645][ T5015] perf_trace_destroy+0xbc/0x100 [ 1390.699664][ T5015] ? perf_tp_event_init+0x120/0x120 [ 1390.711406][ T5015] tp_perf_event_destroy+0x16/0x20 [ 1390.711423][ T5015] perf_event_alloc.part.0+0x186d/0x33d0 [ 1390.711445][ T5015] ? list_del_event+0x7f0/0x7f0 [ 1390.711458][ T5015] ? __kasan_check_read+0x11/0x20 [ 1390.711476][ T5015] ? do_raw_spin_unlock+0x57/0x270 [ 1390.732303][ T5015] __do_sys_perf_event_open+0x989/0x2d50 [ 1390.732323][ T5015] ? __kasan_check_write+0x14/0x20 [ 1390.732347][ T5015] ? perf_event_set_output+0x4e0/0x4e0 [ 1390.747315][ T5015] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1390.747340][ T5015] ? __ia32_sys_read+0xb0/0xb0 [ 1390.747353][ T5015] ? switch_fpu_return+0x1fa/0x4f0 [ 1390.747371][ T5015] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1390.747392][ T5015] __x64_sys_perf_event_open+0xbe/0x150 [ 1390.791259][ T5015] do_syscall_64+0xfa/0x760 [ 1390.795767][ T5015] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1390.795778][ T5015] RIP: 0033:0x4598e9 [ 1390.795794][ T5015] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1390.795802][ T5015] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1390.825173][ T5015] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 [ 1390.825181][ T5015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 1390.825190][ T5015] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1390.825199][ T5015] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f27c6ba46d4 [ 1390.825208][ T5015] R13: 00000000004c671d R14: 00000000004db7d8 R15: 0000000000000003 09:46:43 executing program 4 (fault-call:0 fault-nth:3): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x393, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1390.964317][ T5024] WARNING: CPU: 0 PID: 5024 at kernel/tracepoint.c:243 tracepoint_probe_register_prio+0x216/0x790 [ 1390.974939][ T5024] Kernel panic - not syncing: panic_on_warn set ... [ 1390.981534][ T5024] CPU: 0 PID: 5024 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1390.988990][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1390.999040][ T5024] Call Trace: [ 1391.002337][ T5024] dump_stack+0x172/0x1f0 [ 1391.006672][ T5024] ? tracepoint_probe_register_prio+0x130/0x790 [ 1391.012916][ T5024] panic+0x2dc/0x755 [ 1391.016859][ T5024] ? add_taint.cold+0x16/0x16 [ 1391.017075][ T4993] kobject: 'rfkill4818' (00000000b725c14c): kobject_add_internal: parent: 'phy4816', set: 'devices' [ 1391.021538][ T5024] ? __kasan_check_write+0x14/0x20 [ 1391.021554][ T5024] ? __warn.cold+0x5/0x4c [ 1391.021573][ T5024] ? tracepoint_probe_register_prio+0x216/0x790 [ 1391.021591][ T5024] __warn.cold+0x20/0x4c [ 1391.032908][ T4993] kobject: 'rfkill4818' (00000000b725c14c): kobject_uevent_env [ 1391.037435][ T5024] ? tracepoint_probe_register_prio+0x216/0x790 [ 1391.037452][ T5024] report_bug+0x263/0x2b0 [ 1391.037469][ T5024] do_error_trap+0x11b/0x200 [ 1391.037486][ T5024] do_invalid_op+0x37/0x50 [ 1391.037496][ T5024] ? tracepoint_probe_register_prio+0x216/0x790 [ 1391.037515][ T5024] invalid_op+0x23/0x30 [ 1391.044810][ T4993] kobject: 'rfkill4818' (00000000b725c14c): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim4816/ieee80211/phy4816/rfkill4818' [ 1391.048040][ T5024] RIP: 0010:tracepoint_probe_register_prio+0x216/0x790 [ 1391.048056][ T5024] Code: 48 89 f8 48 c1 e8 03 80 3c 08 00 0f 85 bf 04 00 00 48 8b 45 b8 49 3b 45 08 0f 85 21 ff ff ff 41 bd ef ff ff ff e8 1a 8d fe ff <0f> 0b e8 13 8d fe ff 48 c7 c7 00 27 de 88 e8 07 93 c9 05 44 89 e8 [ 1391.048064][ T5024] RSP: 0018:ffff8881e933fa60 EFLAGS: 00010212 [ 1391.048081][ T5024] RAX: 0000000000040000 RBX: ffffffff89a311c0 RCX: ffffc9000e7a1000 [ 1391.064207][T27608] kobject: 'rfkill4818' (00000000b725c14c): kobject_uevent_env [ 1391.066242][ T5024] RDX: 0000000000000b93 RSI: ffffffff817441e6 RDI: ffff888060942330 [ 1391.066253][ T5024] RBP: ffff8881e933fab8 R08: ffff8880916304c0 R09: fffffbfff11bc4e1 [ 1391.066263][ T5024] R10: ffff8881e933fa50 R11: ffffffff88de2707 R12: ffff888060942310 [ 1391.066273][ T5024] R13: 00000000ffffffef R14: 00000000ffffffff R15: ffffffff8329ada0 [ 1391.066291][ T5024] ? perf_trace_block_bio_remap+0x700/0x700 [ 1391.066313][ T5024] ? tracepoint_probe_register_prio+0x216/0x790 [ 1391.070769][T27608] kobject: 'rfkill4818' (00000000b725c14c): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim4816/ieee80211/phy4816/rfkill4818' [ 1391.075196][ T5024] ? pcpu_create_chunk+0x7f0/0x7f0 [ 1391.075212][ T5024] ? perf_trace_block_bio_remap+0x700/0x700 [ 1391.075227][ T5024] ? perf_trace_block_bio_remap+0x700/0x700 [ 1391.075242][ T5024] tracepoint_probe_register+0x2b/0x40 [ 1391.075256][ T5024] trace_event_reg+0x21b/0x350 [ 1391.075275][ T5024] perf_trace_event_init+0x4f3/0x980 [ 1391.118675][ T4993] ieee80211 phy4816: Selected rate control algorithm 'minstrel_ht' [ 1391.130763][ T5024] perf_trace_init+0x189/0x250 [ 1391.130780][ T5024] perf_tp_event_init+0xa6/0x120 [ 1391.130796][ T5024] perf_try_init_event+0x135/0x590 [ 1391.130813][ T5024] perf_event_alloc.part.0+0x1033/0x33d0 [ 1391.130826][ T5024] ? lock_downgrade+0x920/0x920 [ 1391.130843][ T5024] ? list_del_event+0x7f0/0x7f0 [ 1391.130856][ T5024] ? __kasan_check_read+0x11/0x20 [ 1391.130877][ T5024] ? do_raw_spin_unlock+0x57/0x270 [ 1391.142947][ T4993] kobject: 'net' (0000000081fb6685): kobject_add_internal: parent: 'hwsim4816', set: '(null)' [ 1391.144897][ T5024] __do_sys_perf_event_open+0x989/0x2d50 [ 1391.144917][ T5024] ? __kasan_check_write+0x14/0x20 [ 1391.144939][ T5024] ? perf_event_set_output+0x4e0/0x4e0 [ 1391.144957][ T5024] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1391.144979][ T5024] ? __ia32_sys_read+0xb0/0xb0 [ 1391.145000][ T5024] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1391.153456][ T4993] kobject: 'wlan703' (00000000b4ce7daa): kobject_add_internal: parent: 'net', set: 'devices' [ 1391.160481][ T5024] __x64_sys_perf_event_open+0xbe/0x150 [ 1391.160501][ T5024] do_syscall_64+0xfa/0x760 [ 1391.160520][ T5024] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1391.160531][ T5024] RIP: 0033:0x4598e9 [ 1391.160545][ T5024] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1391.160552][ T5024] RSP: 002b:00007f27c6ba3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1391.160565][ T5024] RAX: ffffffffffffffda RBX: 00007f27c6ba3c90 RCX: 00000000004598e9 [ 1391.160573][ T5024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 1391.160580][ T5024] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1391.160595][ T5024] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f27c6ba46d4 [ 1391.170788][ T4993] kobject: 'wlan703' (00000000b4ce7daa): kobject_uevent_env [ 1391.176503][ T5024] R13: 00000000004c671d R14: 00000000004db7d8 R15: 0000000000000003 [ 1391.178066][ T5024] Kernel Offset: disabled [ 1391.445302][ T5024] Rebooting in 86400 seconds..